- Enforcing jurisdiction
- Austria · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Verein für Konsumenteninformation (VKI) – Court Ruling (Austria, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Austrian Supreme Court is reviewing a case brought by a consumer rights organization against two car rental companies over their terms and conditions. This matters because it could affect how companies draft their terms and how consumers can seek justice for data protection violations.
What happened
The Verein für Konsumenteninformation (VKI) challenged the legality of the car rental companies' general terms and conditions under GDPR.
Who was affected
Consumers who use the services of the two car rental companies are potentially affected by the outcome of this case.
What the authority found
The Austrian Supreme Court referred questions to the Court of Justice regarding whether GDPR allows associations to take action for violations without individual complaints.
Why this matters
This case could set a precedent for how consumer rights organizations can hold companies accountable for data protection violations, impacting how businesses structure their terms and conditions.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Verein für Konsumenten Information (VKI) is an Austrian consumer rights organisation and entiteld to bring collective redress lawsuits and class actions in the interest of consumers pursuant to §§ 28 and 29 of the Austrian Consumer Protection Act (Konsumentenschutzgesetz - KSchG). The VKI brought a lawsuit against two car rental companies due to their allegedly unlawful general terms and conditions, which contained clauses that are (accordning to the VKI) violating Article 25(2) GDPR. The decisions of the first and second court were appealed, the case is currently (January 2021) still pending at the Austrian Supreme Court (Oberster Gerichtshof - OGH), which referred to following question to the CJEU under Article 267 TFEU: Does the GDPR preclude national regulations which, among other things, grant associations the power to take action for violations of the GDPR by way of an action before the civil courts, irrespective of the violation of specific rights of individual data subjects, inter alia from the point of view of the prohibition of the use of ineffective general terms and conditions? The OGH will take its decision in the merits of the case once the CJEU has decided on the requested preliminary ruling. This page will be adapted accordingly then and linked to the CJEU decision which will also be published on GDPRhub.eu.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Verein für Konsumenteninformation (VKI) in AT
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
25 November 2020
Authority
DPA OGH
About this data
Cite as: Cookie Fines. Verein für Konsumenteninformation (VKI) - Austria (2020). Retrieved from cookiefines.eu
Last updated: