GDPR Fines in Austria

About Data Protection Enforcement in Austria

Austria is an active enforcer of GDPR and ePrivacy requirements, with 16 data protection authorities overseeing compliance since 2003. To date, Austria's regulators have taken 329 enforcement actions totaling €42,527,370 in fines. The landmark case was a €16,000,000 fine against Austrian Post in 2019, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has moderated in recent years, potentially indicating improved compliance across the market or a shift in regulatory priorities. The most frequently enforced violations are third-party cookies without consent (15 cases), cookies placed before consent (12 cases), no reject button (11 cases), reflecting the regulatory focus areas in this jurisdiction.