Österreich · Datenschutzgesetz (DSG)
TL;DR
Websites targeting users in Austria must comply with GDPR as implemented locally through the Datenschutzgesetz (DSG). The supervisory authority is the Datenschutzbehörde (DSB). Notable enforcement: Austrian Post fined for profiling voters (€18 million). Use our free scanner below to check your website instantly.
Free audit — 25+ automated checks in 60 seconds
Scan My Website Free →Authority
Datenschutzbehörde (DSB)
Website
www.dsb.gv.at ↗Local Law
Datenschutzgesetz (DSG)
Language
German
Largest Fine
€18 million
Population
9.1 million
Google Analytics was ruled non-compliant by DSB in landmark 2022 decision
Explicit consent required before any analytics tracking
DPO required for regular and systematic monitoring at scale
Must ensure EU-adequate data transfer mechanisms
Cookie consent cannot be bundled with terms acceptance
Data subjects can lodge complaints directly with DSB
Austria's DSB issued the groundbreaking ruling that Google Analytics violates GDPR due to US data transfers, following the Schrems II decision. This ruling cascaded across Europe and forced many websites to reconsider their analytics setup.
Cookie consent banner that requires opt-in before non-essential cookies
Privacy policy available in German
Clear identification of data controller and contact details
Data Processing Agreement (DPA) with all third-party processors
Lawful basis documented for each processing activity
Data Subject Access Request (DSAR) process in place
Data breach notification procedure compliant with 72-hour rule
Data Protection Impact Assessment for high-risk processing
International data transfer mechanisms documented (SCCs, adequacy decisions)
Records of processing activities (ROPA) maintained
In Austria, websites must comply with GDPR as implemented by the Datenschutzgesetz (DSG). Key requirements include obtaining explicit consent before setting non-essential cookies, providing a clear privacy policy, appointing a DPO when required, and notifying data breaches within 72 hours to the Datenschutzbehörde (DSB).
The Datenschutzbehörde (DSB) is the supervisory authority responsible for enforcing data protection laws in Austria. They can investigate complaints, conduct audits, and issue fines up to €20 million or 4% of annual global turnover.
Use PrivacyChecker's free scanner to perform an instant audit of your website. Our tool checks 25+ compliance points including cookie consent, privacy policy presence, security headers, tracker detection, and more — all relevant to Austria's GDPR requirements.
Find out in 60 seconds with our free GDPR scanner
Run Free Audit →