{"id":33178,"date":"2025-09-08T11:16:58","date_gmt":"2025-09-08T09:16:58","guid":{"rendered":"https:\/\/harlander-partner.eu\/data-protection-authority\/"},"modified":"2025-11-24T18:46:16","modified_gmt":"2025-11-24T17:46:16","slug":"data-protection-authority","status":"publish","type":"page","link":"https:\/\/harlander-partner.eu\/en\/data-protection-authority\/","title":{"rendered":"Data Protection Authority"},"content":{"rendered":"\n<div class=\"wp-block-yoast-seo-table-of-contents yoast-table-of-contents\"><h2>Data Protection Authority<\/h2><ul><li><a href=\"#h-datenschutzbehorde\" data-level=\"2\">Data Protection Authority<\/a><\/li><li><a href=\"#h-aufgaben-und-zustandigkeiten\" data-level=\"2\">Tasks and responsibilities<\/a><\/li><li><a href=\"#h-defintion-des-datenschutzes\" data-level=\"2\">Definition of data protection<\/a><\/li><li><a href=\"#h-rechte-der-betroffenen-personen\" data-level=\"2\">Rights of data subjects<\/a><\/li><li><a href=\"#h-pflichten-von-unternehmen\" data-level=\"2\">Obligations of companies<\/a><\/li><li><a href=\"#h-verletzung-des-schutzes-personenbezogener-daten\" data-level=\"2\">Violation of the protection of personal data<\/a><ul><li><a href=\"#h-beschwerdeverfahren\" data-level=\"3\">Complaint procedure<\/a><\/li><li><a href=\"#h-amtswegige-prufungen\" data-level=\"3\">Ex officio reviews<\/a><\/li><li><a href=\"#h-verwaltungsstrafverfahren\" data-level=\"3\">Administrative penal proceedings<\/a><\/li><li><a href=\"#h-rechtsmittel\" data-level=\"3\">Legal Remedies<\/a><\/li><\/ul><\/li><li><a href=\"#h-ihre-vorteile-mit-anwaltlicher-unterstutzung\" data-level=\"2\">Your Benefits with Legal Assistance<\/a><\/li><li><a href=\"#h-haufig-gestellte-fragen-faq\" data-level=\"2\">Frequently Asked Questions &#8211; FAQ<\/a><\/li><\/ul><\/div>\n\n<h2 class=\"wp-block-heading\" id=\"h-datenschutzbehorde\">Data Protection Authority<\/h2>\n\n<p class=\"wp-block-paragraph\">The <strong>Austrian Data Protection Authority (DSB)<\/strong> is the central supervisory authority for the protection of personal data in Austria. It monitors compliance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), decides on complaints, initiates review proceedings, imposes sanctions, and represents Austria on the European Data Protection Board. Its task is to safeguard fundamental rights, prevent abuse, and oblige companies and authorities to comply with data protection obligations.  <\/p>\n\n<div class=\"wp-block-uagb-container uagb-block-3019fe8e alignfull uagb-is-root-container\">\n<div class=\"wp-block-uagb-container uagb-block-32585033\">\n<p class=\"wp-block-paragraph\">The Data Protection Authority is the state supervisory authority for the protection of personal data in Austria.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-uagb-container uagb-block-45819ab6\"><picture>\n\t\t<source srcset=\"https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-352x198.webp\" >\n\t\t<img decoding=\"async\" class=\"mr-picture-small\" src=\"https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp\" alt=\"Explanation of the Austrian Data Protection Authority: Tasks, procedures, and rights for affected parties and companies presented in an understandable manner.\" >\n\t<\/picture>\n<\/div>\n<\/div>\n\n<h2 class=\"wp-block-heading\" id=\"h-aufgaben-und-zustandigkeiten\">Tasks and Responsibilities<\/h2>\n\n<p class=\"wp-block-paragraph\">The Data Protection Authority undertakes a broad range of activities, all of which serve to protect personal data:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Processing of <strong>complaints<\/strong> from data subjects<\/li>\n\n\n\n<li>Conducting <strong>ex officio review proceedings<\/strong><\/li>\n\n\n\n<li>Decision in <strong>administrative penal proceedings<\/strong> and imposition of fines<\/li>\n\n\n\n<li>Receipt and control of <strong>notifications of data breaches<\/strong><\/li>\n\n\n\n<li><strong>Approval procedures<\/strong>, for example for codes of conduct or certification bodies<\/li>\n\n\n\n<li><strong>Opinions<\/strong> on draft laws<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">This makes it the central point of contact for data subjects, companies, and data protection officers alike.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-defintion-des-datenschutzes\">Definition of Data Protection<\/h2>\n\n<p class=\"wp-block-paragraph\">Data protection is the fundamental right to decide for oneself who processes what information about a person. Personal data is all information that relates to a specific person or makes a person identifiable, such as name, address, telephone number, email address, but also photos, IP addresses, or health data. <\/p>\n\n<p class=\"wp-block-paragraph\">Data protection does not mean that no data may be processed. It means that processing is only permitted under clear legal conditions and that data subjects have extensive rights. These rights protect against abuse and give the possibility to exercise control over one&#8217;s own data.  <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-rechte-der-betroffenen-personen\">Rights of Data Subjects<\/h2>\n\n<p class=\"wp-block-paragraph\">Every person can demand that the Data Protection Authority respect their fundamental rights. The GDPR provides a clear set of rights for this purpose: <\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Right to information<\/strong>: Before any data processing, data subjects must be clearly and fully informed.<\/li>\n\n\n\n<li><strong>Right to access<\/strong>: Every data subject may find out what data is stored and for what purpose.<\/li>\n\n\n\n<li><strong>Right to rectification and erasure<\/strong>: Incorrect data must be corrected, inadmissible data must be deleted.<\/li>\n\n\n\n<li><strong>Right to restriction of processing<\/strong>: Under certain conditions, processing may only be continued in a restricted manner.<\/li>\n\n\n\n<li><strong>Right to object<\/strong>: An objection can be raised at any time against certain data processing.<\/li>\n\n\n\n<li><strong>Right to data portability<\/strong>: Data subjects may request that their data be transferred to themselves or to another company in a common format.<\/li>\n\n\n\n<li><strong>Right to protection against automated decisions<\/strong>: No one should be disadvantaged solely on the basis of automated procedures.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">These rights are not only theoretical in nature, but can be enforced \u2013 if necessary, in complaint proceedings before the Data Protection Authority.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-pflichten-von-unternehmen\">Obligations of Companies<\/h2>\n\n<p class=\"wp-block-paragraph\">Companies and authorities are obliged to implement data protection not only on paper, but in practice. The essential obligations include: <\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Legal basis of processing<\/strong>: Every data processing must be based on a legal basis, such as consent or a contract.<\/li>\n\n\n\n<li><strong>Transparency obligations<\/strong>: Data subjects must be clearly informed what happens to their data.<\/li>\n\n\n\n<li><strong>Technical and organizational measures (TOMs)<\/strong>: IT security and organizational processes must be designed in such a way that data is protected against loss, misuse, or unauthorized access.<\/li>\n\n\n\n<li><strong>Records of processing activities<\/strong>: Companies must document in a comprehensible manner which data they process.<\/li>\n\n\n\n<li><strong>Notification of data breaches<\/strong>: Security incidents must be reported to the Data Protection Authority within 72 hours.<\/li>\n\n\n\n<li><strong>Carrying out data protection impact assessments<\/strong>: A detailed analysis must be carried out for high-risk processing.<\/li>\n<\/ul>\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container\">\n<h2 class=\"wp-block-heading\" id=\"h-verletzung-des-schutzes-personenbezogener-daten\">Violation of the Protection of Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">According to the GDPR, <strong>violations of the protection of personal data<\/strong> exist if unauthorized alteration, deletion, disclosure, or loss of data occurs due to inadequate security. This can occur through: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Destruction, loss, or alteration<\/strong> of personal data<\/li>\n\n\n\n<li><strong>Unauthorized access or disclosure<\/strong> \u2013 for example, through hacker attacks, sending data carriers to the wrong recipients, or insecure storage<\/li>\n\n\n\n<li><strong>Accidental data release<\/strong> \u2013 e.g. through insecure storage or transmission<\/li>\n\n\n\n<li>This applies regardless of whether the incident occurred <strong>intentionally or unintentionally<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Examples that can constitute such a violation:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Data loss due to <strong>unencrypted files or USB sticks<\/strong><\/li>\n\n\n\n<li><strong>Hacker attack<\/strong> on customer databases<\/li>\n\n\n\n<li>Misdirected emails containing personal data<\/li>\n\n\n\n<li>Personal documents that are accidentally publicly accessible<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These facts can lead directly to risks, including identity theft, damage to reputation, or financial damage for data subjects<\/p>\n<\/div><\/div>\n\n<h2 class=\"wp-block-heading\">Proceedings before the Data Protection Authority<\/h2>\n\n<p class=\"wp-block-paragraph\">The procedure before the Data Protection Authority is formalized and can have various forms:<\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-beschwerdeverfahren\">Complaint Procedure<\/h3>\n\n<p class=\"wp-block-paragraph\">Data subjects may lodge a complaint with the Data Protection Authority if they believe that someone is unlawfully processing their personal data. This procedure is comparatively low-threshold. <\/p>\n\n<p class=\"wp-block-paragraph\">The process:<\/p>\n\n<ol class=\"wp-block-list\">\n<li>The data subject submits a written complaint \u2013 either by form, email, or post.<\/li>\n\n\n\n<li>The Data Protection Authority checks whether the complaint is formally admissible.<\/li>\n\n\n\n<li>The respondent \u2013 usually a company or an authority \u2013 is asked to comment.<\/li>\n\n\n\n<li>This is followed by the investigation of the facts, if necessary with supplementary questions or hearings.<\/li>\n\n\n\n<li>At the end, there is a <strong>decision<\/strong> by the Data Protection Authority, with which it either rejects the complaint or grants it and orders remedial measures.<\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\">For data subjects, this procedure is the most important way to enforce their rights under the GDPR.<\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-amtswegige-prufungen\">Ex Officio Reviews<\/h3>\n\n<p class=\"wp-block-paragraph\">The Data Protection Authority is not only dependent on complaints, but can also act <strong>ex officio<\/strong>. This happens in particular when there is evidence of systematic violations or security gaps. <\/p>\n\n<p class=\"wp-block-paragraph\">Special features:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>The procedure begins without an application from a data subject.<\/li>\n\n\n\n<li>Reporting persons have no party status and are not informed about the result.<\/li>\n\n\n\n<li>The Data Protection Authority independently checks whether violations exist and orders measures if necessary.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Ex officio reviews have a strong preventive effect, as they increase the pressure on companies and authorities to ensure data protection not only reactively, but continuously.<\/p>\n\n<h3 class=\"wp-block-heading\" id=\"h-verwaltungsstrafverfahren\">Administrative Penal Proceedings<\/h3>\n\n<p class=\"wp-block-paragraph\">If the Data Protection Authority determines a violation, it can initiate <strong>administrative penal proceedings<\/strong>. The aim is to oblige companies and public bodies to remedy violations and impose noticeable sanctions. <\/p>\n\n<p class=\"wp-block-paragraph\">Possible sanctions are:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Fines of up to 20 million euros or 4% of the worldwide annual turnover,<\/li>\n\n\n\n<li>Orders to stop or adjust data processing,<\/li>\n\n\n\n<li>Warnings and conditions.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">The amount of a fine depends on the severity, duration, and intentionality of the violation. Previous violations or cooperative behavior in the proceedings also play a role. <\/p>\n    <div class=\"mr-quote mrbg clearfix\">\n        <a class=\"mr-quote-person\" href=\"\/ueber-uns\/rechtsanwalt-peter-harlander\/\" title=\"Rechtsanwalt Peter Harlander\">\n            <img decoding=\"async\" class=\"mr-quote-person-img\" src=\"https:\/\/harlander-partner.eu\/wp-content\/themes\/harlander\/design\/ph100.webp\" width=\"100\"\n                 height=\"100\" loading=\"lazy\" alt=\"Rechtsanwalt Peter Harlander\">\n            <span class=\"mr-quote-person-text\">\n            Peter Harlander<br>\n            <span class=\"mr-quote-person-function\">Harlander &amp; Partner Rechtsanw\u00e4lte<\/span>\n        <\/span>\n        <\/a>\n        <span class=\"mr-quote-content\">\u201eWer Verfahren vor der Datenschutzbeh\u00f6rde auf die leichte Schulter nimmt, riskiert nicht nur hohe Geldbu\u00dfen, sondern auch den Verlust von Vertrauen und Reputation.\u201c<\/span>\n    <\/div>\n\n<h3 class=\"wp-block-heading\" id=\"h-rechtsmittel\">Legal Remedies<\/h3>\n\n<p class=\"wp-block-paragraph\">Decisions of the Data Protection Authority are made by <strong>decree<\/strong>. Those affected can appeal against these decrees to the <strong>Federal Administrative Court (BVwG)<\/strong>. <\/p>\n\n<ul class=\"wp-block-list\">\n<li>The BVwG reviews the decision in legal and factual terms.<\/li>\n\n\n\n<li>Under certain circumstances, an appeal against its decision to the Administrative Court (VwGH) or a complaint to the Constitutional Court (VfGH) is possible.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">This ensures that decisions of the Data Protection Authority are subject to multi-stage judicial control.<\/p>\n<a class=\"mr-cta-link mr-cta-button-cal\" href=\"#h2-booking\" title=\"Free initial consultation\"><span class=\"mr-cta-link-normal\">Select your preferred appointment now:<\/span><span class=\"mr-cta-link-bold\">Free initial consultation<\/span><\/a>\n\n<h2 class=\"wp-block-heading\">International Dimension<\/h2>\n\n<p class=\"wp-block-paragraph\">Data protection is no longer a national issue. The Data Protection Authority works with other European supervisory authorities and is part of the <g id=\"gid_0\">European Data Protection Board (EDPB)<\/g>. It participates in cross-border cases, coordinates decisions within the framework of the coherence procedure, and comments on international data transfers, for example to the USA.  <\/p>\n\n<h2 class=\"wp-block-heading\">Freedom of Information<\/h2>\n\n<p class=\"wp-block-paragraph\">In addition to data protection, freedom of information is also gaining in importance. With the new Freedom of Information Act (IFG), the Data Protection Authority will in future take on the role of a contact partner for questions of transparency and for access to official information. <\/p>\n\n<p class=\"wp-block-paragraph\">These obligations are not optional. Failure to comply with them regularly leads to investigations and, in extreme cases, to heavy fines. <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"h-ihre-vorteile-mit-anwaltlicher-unterstutzung\">Your Benefits with Legal Assistance<\/h2>\n\n<p class=\"wp-block-paragraph\">Proceedings before the Data Protection Authority involve considerable challenges for both data subjects and companies. Data subjects risk not being able to fully enforce their rights without professional support. Companies, in turn, are faced not only with high fines, but also with damage to their image and costly adjustments to their processes. In addition, the procedures are highly formalized and contain complex legal requirements that are difficult to manage without professional support.   <\/p>\n\n<p class=\"wp-block-paragraph\">Legal support from a specialized law firm provides security and ensures that your interests are professionally represented from the outset. You benefit from sound experience in data protection law and consistent representation before the authority. <\/p>\n\n<ul class=\"wp-block-list\">\n<li>checks whether the respective legal topic is applicable in your case<\/li>\n\n\n\n<li>accompanies you through the entire process or handling<\/li>\n\n\n\n<li>ensures legally compliant design and implementation of all necessary steps<\/li>\n\n\n\n<li>supports in the calculation, enforcement or defense of claims<\/li>\n\n\n\n<li>protects your rights and interests against all parties involved<\/li>\n<\/ul>\n    <div class=\"mr-quote mrbg clearfix\">\n        <a class=\"mr-quote-person\" href=\"\/en\/about-us\/sebastian-riedlmair\/\" title=\"Attorney Sebastian Riedlmair\">\n            <img decoding=\"async\" class=\"mr-quote-person-img\" src=\"https:\/\/harlander-partner.eu\/wp-content\/themes\/harlander\/design\/sr100.webp\" width=\"100\"\n                 height=\"100\" loading=\"lazy\" alt=\"Attorney Sebastian Riedlmair\">\n            <span class=\"mr-quote-person-text\">\n            Sebastian Riedlmair<br>\n            <span class=\"mr-quote-person-function\">Harlander &amp; Partner Attorneys<\/span>\n        <\/span>\n        <\/a>\n        <span class=\"mr-quote-content\">\u201eDatenschutz wird oft untersch\u00e4tzt, dabei entscheidet die richtige Strategie im Umgang mit der Datenschutzbeh\u00f6rde \u00fcber Erfolg oder Misserfolg.\u201c<\/span>\n    <\/div>\n<a class=\"mr-cta-link mr-cta-button-cal\" href=\"#h2-booking\" title=\"Free initial consultation\"><span class=\"mr-cta-link-normal\">Select your preferred appointment now:<\/span><span class=\"mr-cta-link-bold\">Free initial consultation<\/span><\/a>\n\n<h2 class=\"wp-block-heading\" id=\"h-haufig-gestellte-fragen-faq\">Frequently Asked Questions &#8211; FAQ<\/h2>\n<div class=\"wp-block-uagb-faq uagb-faq__outer-wrap uagb-block-972c8b74 uagb-faq-icon-row uagb-faq-layout-accordion uagb-faq-expand-first-true uagb-faq-inactive-other-true uagb-faq__wrap uagb-buttons-layout-wrap uagb-faq-equal-height     \" data-faqtoggle=\"true\" role=\"tablist\"><div class=\"wp-block-uagb-faq-child uagb-faq-child__outer-wrap uagb-faq-item uagb-block-faq1 \" role=\"tab\" tabindex=\"0\"><div class=\"uagb-faq-questions-button uagb-faq-questions\">\t\t\t<span class=\"uagb-icon uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.01s32 14.32 32 32.01v144h144C417.7 224 432 238.3 432 256z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<span class=\"uagb-icon-active uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M400 288h-352c-17.69 0-32-14.32-32-32.01s14.31-31.99 32-31.99h352c17.69 0 32 14.3 32 31.99S417.7 288 400 288z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t<span class=\"uagb-question\">What is the Data Protection Authority?<\/span><\/div><div class=\"uagb-faq-content\"><p>The Data Protection Authority (DSB) is the independent state body that monitors compliance with data protection law in Austria. It processes complaints, investigates possible violations, and imposes penalties if necessary. <\/p><\/div><\/div><div class=\"wp-block-uagb-faq-child uagb-faq-child__outer-wrap uagb-faq-item uagb-block-faq2 \" role=\"tab\" tabindex=\"0\"><div class=\"uagb-faq-questions-button uagb-faq-questions\">\t\t\t<span class=\"uagb-icon uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.01s32 14.32 32 32.01v144h144C417.7 224 432 238.3 432 256z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<span class=\"uagb-icon-active uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M400 288h-352c-17.69 0-32-14.32-32-32.01s14.31-31.99 32-31.99h352c17.69 0 32 14.3 32 31.99S417.7 288 400 288z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t<span class=\"uagb-question\">Who can lodge a complaint with the Data Protection Authority?<\/span><\/div><div class=\"uagb-faq-content\"><p>Any person whose personal data is affected can contact the DSB \u2013 regardless of whether it is a private company, authority, or association.<\/p><\/div><\/div><div class=\"wp-block-uagb-faq-child uagb-faq-child__outer-wrap uagb-faq-item uagb-block-faq4 \" role=\"tab\" tabindex=\"0\"><div class=\"uagb-faq-questions-button uagb-faq-questions\">\t\t\t<span class=\"uagb-icon uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.01s32 14.32 32 32.01v144h144C417.7 224 432 238.3 432 256z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<span class=\"uagb-icon-active uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M400 288h-352c-17.69 0-32-14.32-32-32.01s14.31-31.99 32-31.99h352c17.69 0 32 14.3 32 31.99S417.7 288 400 288z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t<span class=\"uagb-question\">What penalties can the Data Protection Authority impose?<\/span><\/div><div class=\"uagb-faq-content\"><p>In the event of violations of the GDPR or the DSG, the DSB can issue warnings, impose conditions, or impose fines of up to 20 million euros or 4% of a company&#8217;s worldwide annual turnover.<\/p><\/div><\/div><div class=\"wp-block-uagb-faq-child uagb-faq-child__outer-wrap uagb-faq-item uagb-block-faq5 \" role=\"tab\" tabindex=\"0\"><div class=\"uagb-faq-questions-button uagb-faq-questions\">\t\t\t<span class=\"uagb-icon uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.01s32 14.32 32 32.01v144h144C417.7 224 432 238.3 432 256z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<span class=\"uagb-icon-active uagb-faq-icon-wrap\">\n\t\t\t\t\t\t\t\t<svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox= \"0 0 448 512\"><path d=\"M400 288h-352c-17.69 0-32-14.32-32-32.01s14.31-31.99 32-31.99h352c17.69 0 32 14.3 32 31.99S417.7 288 400 288z\"><\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t<span class=\"uagb-question\">Do I need a lawyer for proceedings before the Data Protection Authority?<\/span><\/div><div class=\"uagb-faq-content\"><p>A lawyer is not mandatory, but highly recommended. Procedures are often complex, and legal support increases the chances of successfully enforcing your rights or avoiding sanctions. <\/p><\/div><\/div><\/div><a class=\"mr-cta-link mr-cta-button-cal\" href=\"#h2-booking\" title=\"Free initial consultation\"><span class=\"mr-cta-link-normal\">Select your preferred appointment now:<\/span><span class=\"mr-cta-link-bold\">Free initial consultation<\/span><\/a>\n","protected":false},"excerpt":{"rendered":"Data Protection Authority The Austrian Data Protection Authority (DSB) is the central supervisory authority for the protection of personal data in Austria. It monitors compliance with the General Data Protection &#8230;","protected":false},"author":25,"featured_media":27150,"parent":0,"menu_order":845,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","footnotes":""},"categories":[323],"tags":[],"class_list":["post-33178","page","type-page","status-publish","has-post-thumbnail","hentry","category-law"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp",1920,1080,false],"thumbnail":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-100x100.webp",100,100,true],"medium":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-800x450.webp",800,450,true],"medium_large":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp",1920,1080,false],"large":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp",1920,1080,false],"1536x1536":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp",1536,864,false],"2048x2048":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde.webp",1920,1080,false],"336x":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-336x189.webp",336,189,true],"352x":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-352x198.webp",352,198,true],"woocommerce_thumbnail":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-300x300.webp",300,300,true],"woocommerce_single":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-600x338.webp",600,338,true],"woocommerce_gallery_thumbnail":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-100x100.webp",100,100,true],"yarpp-thumbnail":["https:\/\/harlander-partner.eu\/wp-content\/uploads\/Datenschutzbehoerde-120x120.webp",120,120,true]},"uagb_author_info":{"display_name":"Simon Prem","author_link":"https:\/\/harlander-partner.eu\/en\/author\/simon-prem\/"},"uagb_comment_info":0,"uagb_excerpt":"Data Protection Authority The Austrian Data Protection Authority (DSB) is the central supervisory authority for the protection of personal data in Austria. It monitors compliance with the General Data Protection ...","_links":{"self":[{"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/pages\/33178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/comments?post=33178"}],"version-history":[{"count":0,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/pages\/33178\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/media\/27150"}],"wp:attachment":[{"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/media?parent=33178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/categories?post=33178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harlander-partner.eu\/en\/wp-json\/wp\/v2\/tags?post=33178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}