BVwG - W298 2314952-1
Austrian court rules publication of unredacted personal data in legal decisions unlawful if not necessary.
An Austrian court ruled that publishing unredacted personal data in legal decisions on a government website is unlawful if it's not necessary for understanding the decision or serving transparency. The data subject, a policeman facing disciplinary action, complained about insufficient anonymization in a published decision that revealed his professional role, teaching location, and mental health status.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Federal Chancellery of Austria?
Get an email when a new story names Federal Chancellery of Austria, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAn Austrian administrative court found that a government website published a legal decision containing insufficiently anonymized personal data, including a policeman's professional role, teaching location, and mental health status. The root cause was a failure to implement proper data minimization and anonymization procedures before publishing official documents online. Exposing sensitive categories of data — such as mental health information — without necessity violates GDPR principles of data minimization and purpose limitation. This case demonstrates that transparency obligations do not override an individual's right to privacy, and organizations must carefully balance public interest against personal data protection. Failing to establish clear redaction workflows for published documents can result in legal liability and reputational harm for public institutions.