Court case G 72-74/2019 G 181-182/2019 – Court Ruling (Austria, 2019)

Court Ruling
DPA VfGH11 December 2019Austria
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Austria's Constitutional Court ruled against a law allowing government hacking of encrypted messages, citing privacy rights violations. This decision is crucial as it protects citizens' private communications from excessive surveillance.

What happened

The Austrian court struck down a law permitting government hacking of encrypted messages.

Who was affected

Austrian citizens whose encrypted communications could be intercepted by the government.

What the authority found

The court found the surveillance law violated fundamental privacy rights under the European Convention on Human Rights.

Why this matters

This ruling emphasizes the need for strong privacy protections against government surveillance. It sets a precedent for limiting state powers in accessing private communications, reinforcing citizens' rights to privacy.

National Law Articles

Article 8 ECHR
§1 Austrian Data Protection Law (DSG)
Decision AuthorityVfGH
Full Legal Summary
Detailed

Austria introduced [https://www.ris.bka.gv.at/eli/bgbl/1975/631/P135a/NOR40202514 § 135a] of the criminal procedures act (StPO) to allow the use of spy software on devices ("government hacking") to be able to tap encrypted communication between smartphones. The mandatory data retention via license plate readers was also challenged before the Court. Members of the Parliament (Social Democrats and the Liberal Party) have applied to the Constitutional Court (VfGH) claiming that the law violates citizens' fundamental rights. The Court decided that the surveillance law that permits the use of spying software to read encrypted messages contravenes the fundamental rights to private life according to Article 8 ECHR, to data protection as foreseen in § 1 of the Austrian data protection act (Datenschutzgesetz - DSG). The Court highlighted the difference between traditional wiretapping and modern computer systems which read encrypted messages. The latter provides insight into all areas of life allowing inferences about the user’s thoughts and preferences. Considering the particularities of the surveillance measure, this control mechanism was deemed to be not sufficient. The Court required an effective independent supervision by an institution which affords all appropriate technical means and human resources both at the beginning of the measure and the entire duration of the surveillance. The Court ruled that the recognition of licence plates, car types and driver pictures in a centralised database of the Ministry of Interior constitutes an indiscriminate data retention.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case G 72-74/2019 G 181-182/2019 in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

11 December 2019

Authority

DPA VfGH

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case G 72-74/2019 G 181-182/2019 - Austria (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: