News
Recent decisions of the Austrian Data Protection Office (DSB)
The article presents three interesting decisions on Austrian data protection law, in particular dealing with the scope of the right to access (1. and 2.) and the definition of video surveillance (3.).
1. Distribution of location data to the contractor - Case Nr DSB-D122.616/006-DSB/2016: In this decision the DSB is dealing with the question whether it is within the scope of the right of access / right to information of a contracting party to request location data from the mobile operator, which is processed in a communications network or by a communications service and which specifies the geographical location of the telecommunications terminal equipment of a user. Since the location data (GPS-data) is required as operational data for ""routing"" within the communications network – hence within the scope of service provision via mobile devices (eg calls, messages) –, the user cannot prevent/stop or switch off the generation of location data. Likewise this is the case with some apps, which enable the location tracking via GPS function of smartphones.
The complainant submitted an affidavit stipulating that he was the owner with sole power of disposal of the mobile device and discretion on the contract. The mobile operator refused to provide the contractor with the requested data. This justified by the fact that due to the specific provision of the TKG 2003 (Austrian Telecommunications Act) location data could only be transmitted on the basis of police investigations or judicial orders or rarely to emergency service operators.
As a result, the DSB shared the view of the mobile operator and stated that the restriction of the right of access / right to information is covered by case law of the OGH (Austrian Supreme Court), according to which the TKG 2003 only allows the data subject to obtain information on stored traffic data in regards to itemised billing. In this specific case, the restriction of the disclosure of information within the framework of the special provision of the TKG 2003 was to be preferred to the general right of access / right to information as laid down in § 26 (1) DSG 2000 (Austrian Data Protection Act).
2. Information about employees of the controller - Case Nr DSB-D122.671/0007-DSB/2017: The DSB had to assess whether or not the right to information includes the designation of specific employees of a controller.
The appellant had asked for general information on the employees of the controller who had requested their data in a certain period. Referring to the case law of the DSK (former Austrian Data Protection Commission), the DSB noted that the right of access / right to information only covers delivery operations to new clients, but not individual data processing by the controller´s employees. The names of the employees of the controller is also not ""data processed in connection with the information seeking person"" or ""available information on their origin"", which is why they are not covered by § 26 DSG 2000. In addition, the right of access / right to information should help to secure one´s rights to secrecy and to erasure. However, these rights are directed against the particular controller and not against his employees. In addition, the DSB acknowledged that the naming of particular employees of a controller is covered by the right of access / right to information if the person concerned has concrete indications that he has been infringed in his data protection rights by an employee of the controller. However, the information request must state such suspicions clearly, so that the controller can decide whether the right of access / right to information of the data subject outweighs the right to secrecy of the employee. As the appellant did not express any concrete suspicion, the complaint was rejected.
3. Image documentation or video surveillance? - Case Nr. DSB-D122.453/0008-DSB/2016: The DSB had to decide whether occasional recording of helicopter take-offs and landings on a helicopter landing pad by a neighbour is to be considered as video surveillance (Title 9a DSG 2000). After inspecting the image data, the DSB concluded that no video surveillance was carried out. The recordings were made on a case-by-case basis, by means of a hand-held camera and from different positions. They also did not show any image of the complainant. The image data was used for the documentation of events (flight movements and for the preservation of evidence). The data was not used systematically, in particular not by means of a permanently installed system, and not on a continuous basis. Therefore, the complainant did not have any specific right of access / right to information as provided in § 50 p. e DSG 2000.
External links:
Article provided by: Hon.-Prof. Dr. Clemens Thiele, LL.M., Austria
Discover more about the Cloud Privacy Check(CPC) / Data Privacy Compliance(DPC) project
CPC project office: Dr. Tobias Höllwarth, tobias.hoellwarth@eurocloud.at
News Archiv
- Alle zeigen
- April 2024
- März 2024
- Februar 2024
- Jänner 2024
- Dezember 2023
- November 2023
- Oktober 2023
- September 2023
- August 2023
- Juli 2023
- Juni 2023
- Mai 2023
- April 2023
- März 2023
- Februar 2023
- Jänner 2023
- Dezember 2022
- November 2022
- Oktober 2022
- September 2022
- August 2022
- Juli 2022
- Mai 2022
- April 2022
- März 2022
- Februar 2022
- November 2021
- September 2021
- Juli 2021
- Mai 2021
- April 2021
- Dezember 2020
- November 2020
- Oktober 2020
- Juni 2020
- März 2020
- Dezember 2019
- Oktober 2019
- September 2019
- August 2019
- Juli 2019
- Juni 2019
- Mai 2019
- April 2019
- März 2019
- Februar 2019
- Jänner 2019
- Dezember 2018
- November 2018
- Oktober 2018
- September 2018
- August 2018
- Juli 2018
- Juni 2018
- Mai 2018
- April 2018
- März 2018
- Februar 2018
- Dezember 2017
- November 2017
- Oktober 2017
- September 2017
- August 2017
- Juli 2017
- Juni 2017
- Mai 2017
- April 2017
- März 2017
- Februar 2017
- November 2016
- Oktober 2016
- September 2016
- Juli 2016
- Juni 2016
- Mai 2016
- April 2016
- März 2016
- Februar 2016
- Jänner 2016
- Dezember 2015
- November 2015
- Oktober 2015
- September 2015
- August 2015
- Juli 2015
- Juni 2015
- Mai 2015
- April 2015
- März 2015
- Februar 2015
- Jänner 2015
- Dezember 2014
- November 2014
- Oktober 2014
- September 2014
- August 2014
- Juli 2014
- Juni 2014
- Mai 2014
- April 2014
- März 2014
- Februar 2014
- Jänner 2014
- Dezember 2013
- November 2013
- Oktober 2013
- September 2013
- August 2013
- Juli 2013
- Juni 2013
- Mai 2013
- April 2013
- März 2013
- Februar 2013
- Jänner 2013
- Dezember 2012
- November 2012
- Oktober 2012
- September 2012
- August 2012
- Juli 2012
- Juni 2012
- Mai 2012
- April 2012
- März 2012
- Februar 2012
- Jänner 2012
- Dezember 2011
- November 2011
- Oktober 2011
- September 2011
- Juli 2011
- Juni 2011
- Mai 2011
- April 2011
- März 2011
- Februar 2011
- Jänner 2011
- November 2010
- Oktober 2010
- September 2010
- Juli 2010