Enforcing jurisdiction
Austria · Geography does not establish applicable law.
Confirmed applicable legislation

Court case W292 2259696-1 – Court Ruling (Austria, 2023)

Court Ruling
Datenschutzbehörde27 February 2023Austria
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

An Austrian court ruled that a woman used her husband's intimate photos in a divorce case without violating data protection rules. The court found that sharing the photos with a third party couldn't be proven. This case highlights the complexities of privacy in personal disputes.

What happened

A woman used intimate photos of her husband and his lover in a divorce proceeding.

Who was affected

The husband, whose photos were used, was the main person affected.

What the authority found

The court decided that the woman's actions were necessary for the divorce case and did not violate data protection rules.

Why this matters

This ruling shows that courts may allow the use of sensitive personal data in legal proceedings if deemed necessary. It reminds individuals to be cautious about sharing sensitive information, even in personal matters.

Recorded legal citations
Automatically processed
Art. 9(2)(f) GDPR
View original scraped data
Art. 9(2)(f) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityBVwG
Reviewed AuthorityDSB (Austria)

Source checks

Linked-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A woman (the controller) used intimate photos of her husband (the data subject) and his lover in a divorce proceeding. According to the data subject, the controller also shared this material with a third party, namely the husband of the other woman involved. The pictures were originally uploaded on a cloud service by the data subject himself. Credentials to access the cloud were noted down in a notebook kept next to the computer, which was accessible to all the members of the family. The data subject filed a complaint with the Austrian DPA (Datenschutzbehörde - DSB). The DSB dismissed the complaint. On the one hand, disclosure before the civil court was necessary to prove the data subject’s responsibility in the divorce dispute. On the other hand, disclosure to third parties could not be proved. The Federal Administrative Court confirmed that a disclosure to third parties could not be proved. As a matter of fact, the former husband of the data subject’s lover got the pictures only indirectly from an anonymous email addressed to his lawyer. In particular, the Court pointed out to the fact that credentials to access the data subject’s account on the cloud were easily available to everybody living in the house. Concerning the disclosure in the civil proceeding, the pictures were undoubtedly special categories of personal data under Article 9(1) GDPR, whose processing is in principle prohibited. However, in this case processing was covered by the exception under Article 9(2)(f) GDPR. The Court stressed that, for the exception to apply, processing should be “necessary” to the purpose stated in this provision, which means that a judicial claim or defence would not be possible without the processing. Nevertheless, such a requirement shall not be interpreted too strictly. In the Court’s opinion, when disclosure in judicial proceeding is deemed not relevant by the judge, this does not automatically entail a violation of Article 9 GDPR. The only case in which Article 9(2)(

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case W292 2259696-1 in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

27 February 2023

Authority

Datenschutzbehörde

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case W292 2259696-1 - Austria (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: