In a complaint procedure pursuant to Article 77(1) GDPR, the alleged controller was requested to provide information concerning an alleged infringement of the GDPR. Despite being requested several times, the alleged controller ignored all requests by the Austrian DPA and even refused to appear before the Authority when subpoenaed for an oral examination and when threatened with a fine of EUR 500,--- in case he would not appear. Consequently, the Austrian DPA requested the local District Authority to forcibly collect the fine. When being faced with this fine, the alleged controller eventually provided the information. It has to be noted that the subpoena was based on Austrian procedural law rule. However, Article 31 GDPR also stipulates the obligation to cooperate with the DPA in the performance of its tasks while the violation of this obligation can result in imposing administrative fines pursuant to Article 83 GDPR. In the past, the Austrian DPA has made use of both, Austrian procedural law rule and the cooperation obligation stipulated in the GDPR itself to obtain information from controllers who persistently refused to do so.
For further information, please contact the Austrian DPA: dsb@dsb.gv.at
The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA's website or other channels of communication, the news item is only available in English or in the Member State's official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned