BVwG - W137 2327171-1
Austrian court upholds DPA decision on GDPR violation for publishing unredacted judgment.
An Austrian court has upheld a decision by the Data Protection Authority (DPA) that an assistant professor violated GDPR by publishing an unredacted court judgment on social media. The judgment named a senior legal counsel who had testified in an employment dispute. The DPA found that while a legitimate interest might exist, the publication was excessive, especially since anonymizing the data subject's name would have been equally effective in conveying the judgment's relevance to university staff.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Austrian Data Protection Authority?
Get an email when a new story names Austrian Data Protection Authority, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAn Austrian assistant professor violated GDPR by publishing an unredacted court judgment on social media, exposing the personal data of a named legal counsel. The Data Protection Authority found that while a legitimate interest existed for sharing the judgment, the publication was disproportionate because anonymization would have achieved the same communicative goal. This case illustrates the principle of data minimization — sharing only the personal data strictly necessary for the intended purpose. The ruling matters because even academically or professionally motivated disclosures can constitute GDPR violations when less privacy-invasive alternatives are available. Individuals in professional roles, not just organizations, bear personal accountability for lawful data handling.