Data Protection Law in Austria

The General Data Protection Regulation (GDPR), applicable directly in all member states since May 25, 2018, forms the foundation of Austrian data protection law together with the national Data Protection Act (DSG). Its aim is to protect natural persons in the processing of personal data and to ensure the free flow of data within the EU. Accordingly, the regulations impose numerous obligations on controllers and processors - ranging from lawful processing and documentation and information duties to the reporting of data breaches. Violations can be subject to significant fines.

What we do: Our experts have extensive experience advising, in particular, companies, authorities, and public bodies on all aspects of data protection law. We assist our clients with the implementation of GDPR-compliant processes, draft and review privacy notices (e.g., on websites), and represent them before the Data Protection Authority as well as in administrative court proceedings. We support, among other things, in data protection impact assessments, reporting data breaches to the Data Protection Authority, and handling data subjects’ requests for access or deletion.