Verein für Konsumenteninformation (VKI) – Court Ruling (Austria, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An Austrian consumer rights group, VKI, took legal action against car rental companies over their terms and conditions. The case questions if GDPR allows national laws to let groups sue for privacy violations without specific individual complaints. This could impact how consumer groups can act on privacy issues.
What happened
VKI challenged car rental companies' terms, questioning if GDPR allows group lawsuits without individual complaints.
Who was affected
Consumers using car rental services with allegedly unfair terms and conditions.
What the authority found
The Austrian Supreme Court sought clarification from the CJEU on whether GDPR permits national laws to enable group actions for privacy violations without specific individual complaints.
Why this matters
This case could set a precedent for how consumer groups can pursue privacy violations, potentially broadening their ability to act without needing individual complaints. It highlights the evolving role of collective redress in privacy law.
GDPR Articles Cited
National Law Articles
The Verein für Konsumenten Information (VKI) is an Austrian consumer rights organisation and entiteld to bring collective redress lawsuits and class actions in the interest of consumers pursuant to §§ 28 and 29 of the Austrian Consumer Protection Act (Konsumentenschutzgesetz - KSchG). The VKI brought a lawsuit against two car rental companies due to their allegedly unlawful general terms and conditions, which contained clauses that are (accordning to the VKI) violating Article 25(2) GDPR. The decisions of the first and second court were appealed, the case is currently (January 2021) still pending at the Austrian Supreme Court (Oberster Gerichtshof - OGH), which referred to following question to the CJEU under Article 267 TFEU: Does the GDPR preclude national regulations which, among other things, grant associations the power to take action for violations of the GDPR by way of an action before the civil courts, irrespective of the violation of specific rights of individual data subjects, inter alia from the point of view of the prohibition of the use of ineffective general terms and conditions? The OGH will take its decision in the merits of the case once the CJEU has decided on the requested preliminary ruling. This page will be adapted accordingly then and linked to the CJEU decision which will also be published on GDPRhub.eu.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Verein für Konsumenteninformation (VKI) in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Verein für Konsumenteninformation (VKI) - Austria (2020). Retrieved from cookiefines.eu
Last updated: