Österreichische Post AG

Austria's Federal Administrative Court upheld the Data Protection Authority's finding that Österreichische Post AG unlawfully processed inferred data concerning individuals' political-party affinity without consent and ordered the company to stop processing that category of data. A separate EUR 18 million GDPR fine was annulled and the penalty proceeding terminated because of a procedural attribution defect, so this evidence does not claim that the EUR 18 million fine remained valid. The underlying illegality finding concerning political-affinity processing was nevertheless confirmed. Source: https://www.bvwg.gv.at/Aktuelles/Publikationen-des-BVwG/Ausgew-hlte-Entscheidungen-des-Bundesverwaltungsgerichts/Datenschutzverfahren--sterreichische-Post.html