[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2DO60kKZLOJgLze5oY95fwUUHtxJSvY7Gc6DZe30Nx4":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":57},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"fcc26285-a8f5-42f0-b1cd-93e6a806fa6c","BVwG - W137 2327171-1","bvwg-w137-2327171-1-615787","Fixed link ← Older revision Revision as of 07:17, 16 September 2026 Line 162: Line 162: |Appeal_From_Body=DSB |Appeal_From_Body=DSB (Austria) |Appeal_From_Case_Number_Name=D124.0891\u002F25, 2025-0.833.293 |Appeal_From_Case_Number_Name=D124.0891\u002F25, 2025-0.833.293 |Appeal_From_Status= |Appeal_From_Status=","An Austrian court has upheld a decision by the Data Protection Authority (DPA) that an assistant professor violated GDPR by publishing an unredacted court judgment on social media. The judgment named a senior legal counsel who had testified in an employment dispute. The DPA found that while a legitimate interest might exist, the publication was excessive, especially since anonymizing the data subject's name would have been equally effective in conveying the judgment's relevance to university staff.","Austrian court upholds DPA decision on GDPR violation for publishing unredacted judgment.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=BVwG_-_W137_2327171-1&diff=53065&oldid=52580","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-09-16T07:17:07+00:00","2026-09-16T08:00:14.726099+00:00",7,[17,20,22,24,26],{"name":18,"type":19},"Facebook","product",{"name":21,"type":19},"Dropbox",{"name":23,"type":19},"Adobe",{"name":25,"type":19},"LinkedIn",{"name":27,"type":28},"Austrian Data Protection Authority","vendor","3f0f8451-91df-4b6c-9a73-ef3b2509b7f1",{"id":29,"icon":31,"name":32,"slug":33},null,"GDPR","gdpr",[35,37,42,47],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[],[27,18,21],{"controls":55,"vendors":56},[],[],{"slug":58,"title":59,"body":60,"framework_refs":61,"framework_notes":71},"gdpr-violation-unredacted-court-judgment-shared-on-social-media","GDPR Violation: Unredacted Court Judgment Shared on Social Media","An Austrian assistant professor violated GDPR by publishing an unredacted court judgment on social media, exposing the personal data of a named legal counsel. The Data Protection Authority found that while a legitimate interest existed for sharing the judgment, the publication was disproportionate because anonymization would have achieved the same communicative goal. This case illustrates the principle of data minimization — sharing only the personal data strictly necessary for the intended purpose. The ruling matters because even academically or professionally motivated disclosures can constitute GDPR violations when less privacy-invasive alternatives are available. Individuals in professional roles, not just organizations, bear personal accountability for lawful data handling.",[62,63,64,65,66,67,68,69,70],"GDPR Article 5(1)(c) – Data Minimisation","GDPR Article 6(1)(f) – Legitimate Interests (Balancing Test)","GDPR Article 5(1)(a) – Lawfulness, Fairness and Transparency","NIST SP 800-53 PL-4 – Rules of Behavior","NIST SP 800-53 AT-2 – Awareness Training","CIS Control 14 – Data Protection","CIS Control 17 – Security Awareness and Skills Training","ISO\u002FIEC 27001 A.7.2.2 – Information Security Awareness, Education and Training","ITIL Service Management – Knowledge Management and Communication Controls",{}]