Austrian Post fined EUR 18 million

On 23/Oct/2019, Austrian Post received a privacy fine of EUR 18,000,000. The enforcement authority (Austrian Data Protection Authority) has cited these legal provisions in imposing the fine on Austrian Post: Article 5 GDPR/ Article 5(1)(a) GDPR/ Article 6 GDPR/


Date of enforcement action:
Jurisdiction: Fine imposed:
Austria Flag for Austria, which is the jurisdiction taking enforcement action EUR 18,000,000 (US$19,900,000)
Defendant company or entity: Industry segment:
Austrian Post Government / Retail / Utilities /

Case summary

Austrian Post has been ordered to pay €18 million ($20 million) for collecting and selling mailers’ perceived political preferences. The Austrian Data Protection Authority decided on the administrative penalty after finding that the postal service had violated privacy regulations, the Justice Ministry announced in a press release late Tuesday. In January, the investigative journalism platform Addendum reported that Austrian Post was selling the names, addresses, ages and genders of about 3 million customers to marketing companies. Employees of Austrian Post even made educated guesses about the political affinities of 2.2 million people who sent mail and sold that information to parties in search of new members. Austrian Post’s direct-mailings division generates annual revenues of about €200 million. Following the report, representatives had announced that the postal service would delete its database of the likely leanings of about 2.2 million customers. At the time, Austrian Post had pledged to restructure its entire database “along new lines.” (DW)

Applicable legal provisions

Enforcement information

Enforcement authority: Type of enforcement action:
Austrian Data Protection Authority Flag for Austria, which is the jurisdiction taking enforcement action Penalty notice
Subject to appeal?

Cite this fine in your work

Data Privacy Fines Index. (2019-10-23 09:09) Austrian Post fined EUR 18 million. Retrieved from

Entry last updated: 2020-01-12 11:39 GMT.