Private individual – €600 Fine (Austria, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An Austrian private individual was fined for sharing a court report with a public institution. The report contained health information about a kindergarten teacher, which was shared without permission. This case shows that even private individuals must be careful about sharing sensitive personal data.
What happened
A private individual shared a court report containing health data about a kindergarten teacher without permission.
Who was affected
A kindergarten teacher whose health information was shared without consent.
What the authority found
The authority determined that sharing the court report was unlawful because it involved processing sensitive personal data without a valid reason.
Why this matters
This case highlights that individuals, not just companies, must be cautious when handling sensitive personal data. Sharing such information without a valid reason can lead to penalties.
GDPR Articles Cited
The Austrian DPA imposed a fine of EUR 600 on a private individual. The individual had contacted a public institution to draw their attention to the fact that the statement of a kindergarten teacher that she was 50% disabled did not correspond to reality. For this purpose, the person submitted a court report that contained health-related data of the data subject. In the course of its investigation, the DPA found that the transmission of the court report constituted an unlawful processing of the kindergarten teacher's personal data.
Related Enforcement Actions (1)
Other enforcement actions involving Private individual in AT
Details
Fine Date
1 January 2021
Authority
Datenschutzbehörde
Fine Amount
€600
Enforcement Tracker ID
ETid-1419
About this data
Cite as: Cookie Fines. Private individual - Austria (2021). Retrieved from cookiefines.eu
Last updated: