Selling a register. Price: €18 000 000

Selling a register. Price: €18 000 000

The Austrian post company Österreichische Post AG has been fined €180 million by the Austrian data protection authority.

Österreichische Post has created, and resold, a register containing personal data about closer to 3 million Austrian citizens. As a legal ground for this processing,

Österreichische Post claims legitimate interest, since it is necessary for their business activities. The Austrian DPA disagrees, especially since the register contains guesses about the data subjects political beliefs.

The fine once again shows the need to be very careful when processing sensitive personal data described in article 9.

Österreichische Post AG is registered on the stock market, and the stock price took a nosedive following the announcement.