- Enforcing jurisdiction
- Austria · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Österreichischer Rundfunk – CJEU Judgment (Austria, 2003)
CJEU precedent (Directive 95/46/EC, pre-GDPR)
This is a Court of Justice judgment predating the GDPR. It interprets Directive 95/46/EC (the Data Protection Directive). It is not a cookie or ePrivacy case and is excluded from cookie statistics and the Risk Calculator.
Some Austrian public authorities did not share employee salary data with a State control body, which was against the law. The Court of Justice ruled that national laws must comply with EU data protection principles. This case shows that privacy rights must be respected even in public sector data sharing.
What happened
Austrian public authorities refused to provide salary data to a State control body.
Who was affected
Employees of public authorities in Austria were indirectly affected by this refusal.
What the authority found
The Court ruled that national laws allowing such refusals must comply with EU data protection rules.
Why this matters
This case highlights the need for public authorities to respect data protection rights. It serves as a warning for organizations about the importance of lawful data sharing.
Source checks
Secondary-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Some Austrian public authorities and undertakings refused to provide a State control body with access to personal data concerning salaries and incomes of their employees. In doing so, they violated Austrian law. The Austrian Constitutional Court, however, suspected that such a national law may have been in violation of Directive 95/46/EC. In particular, the provision on which disclosure of employees’ data was based seemed in conflict with Articles 6(1)(b) and (c), namely purpose limitation and data minimization. In the opinion of the Austrian Constitutional Court, legal bases under Articles 7(c) and (e) of the Directive – i.e. legal obligation and public interest – should be read in light of Article 8 of the European Convention on Human Rights (ECHR), which protects privacy and family life. Therefore, the Austrian Constitutional Court referred the matter to the Court of Justice. The CJEU had to answer the question whether Directive 95/46/EC precluded the adoption of national law authorizing a State control body to collect and communicate, for the purpose of publication, data on the income of people employed by public bodies. The CJEU stated that processing of personal data should take place only in compliance with data protection principles and on grounds of a valid legal basis. Moreover, being privacy a fundamental right protected by the ECHR, interference with it should respect Article 8 of the Convention. To ascertain whether processing was compliant with the Convention, the CJEU performed a four-steps test commonly used by the European Court of Human Rights. It ascertained: # the existence of an interference with privacy in the facts at issue; # that interference was in accordance with Austrian law; # that the measure had a legitimate aim, namely to put pressure on public bodies so that they kept employees’ salaries within reasonable limits and did not burden State’s finances; # that proportionality was respected. In principle, taxpayers in a democratic soci
Outcome
CJEU Case
A judgment or Advocate General opinion in a case before the Court of Justice of the European Union.
Related Cases (0)
No other cases found for Österreichischer Rundfunk in AT
This is the only recorded case for this entity in this jurisdiction.
Details
Judgment Date
20 May 2003
Authority
Court of Justice of the European Union
About this data
Cite as: Cookie Fines. Österreichischer Rundfunk - Austria (2003). Retrieved from cookiefines.eu
Last updated: