Austria: DSB fines Österreichische Post €9.5M
Österreichische Post announced, on 28 September 2021, that it had been fined €9.5 million by the Austrian data protection authority ('DSB') for data protection related violations. Although the DSB has yet to release its decision, according to Österreichische Post, the DSB found that in addition to the contact options used by Österreichische Post by post, web contact form, and customer service, data protection inquiries must also be allowed by email.
Furthermore, Österreichische Post noted that this fine follows a previous administrative procedure initiated by the DSB against Österreichische Post in October 2019, in which the DSB decided to impose a fine of €18 million for violations of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') related to, among other things, processing personal data on the alleged political affinity of affected data subjects, and which was overturned by the Federal Administrative Court in December 2020.
In addition, Österreichische Post outlined that it will appeal the decision.
You can read Österreichische Post's press release, only available in German, here.