The Risks of Customer Data Processing Under the GDPR: The Austria Post Case

Alessandra Fratini ()
Additional contact information
Alessandra Fratini: FratiniVergano – European Lawyers

A chapter in The Economics of the Postal and Delivery Sector, 2022, pp 133-144 from Springer

Abstract: Abstract On 23 October 2019, the Austrian data protection authority (Datenschutzbehörde, “DSB”) imposed a fine of €18 million on Österreichische Post AG (“Austria Post”) for various violations of the EU General Data Protection Regulation (“GDPR”). The DSB established that Austria Post had unlawfully processed customers’ data to extrapolate “political affinity” (i.e., presumed voting behavior), which was then sold to political parties for targeted advertising. In addition, according to the DSB, Austria Post had further processed data on package frequency and frequency of relocations for the purpose of direct marketing in the absence of a legal basis. The fine, which is not final as Austria Post has challenged the DSB’s decision (“Decision”) before the Federal Administrative Court (Bundesverwaltungsgericht). The fine was at the time of issuance the largest ever imposed in Austria for GDPR infringements.

Date: 2022
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:topchp:978-3-030-82692-5_9

Ordering information: This item can be ordered from
http://www.springer.com/9783030826925

DOI: 10.1007/978-3-030-82692-5_9

Access Statistics for this chapter

More chapters in Topics in Regulatory Economics and Policy from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().