[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffhGsoxn7-RX3__Pk8zu1bEpkyvt9pLTNXSh-OtZvgSQ":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":46},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"4bea0508-f784-4dfb-bcf4-db8ed7b9b3b4","BVwG - W298 2314952-1","bvwg-w298-2314952-1-460db5","← Older revision Revision as of 08:43, 22 September 2026 (2 intermediate revisions by the same user not shown) Line 88: Line 88: }} }} The making available of unredacted personal data as part of a legal decision published on an official website is unlawful insofar as it is not necessary for understanding the meaning of the decision and serving the aims of transparency and legal certainty. The court held that the making available of unredacted personal data within a legal decision published on an official government website is unlawful insofar as it is not necessary for understanding the meaning of the decision and serving the aims of transparency and legal certainty. == English Summary == == English Summary ==","An Austrian court has ruled that publishing unredacted personal data within legal decisions on an official government website is unlawful if it's not essential for understanding the decision or for transparency and legal certainty. The case involved a police officer whose professional details, including his teaching position and workplace, were published without redaction, making him identifiable and exposing sensitive health information.","Austrian court rules publishing unredacted personal data in legal decisions unlawful if not necessary.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=BVwG_-_W298_2314952-1&diff=53135&oldid=53020","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-09-22T08:43:47+00:00","2026-09-22T10:00:09.101293+00:00",7,[17,20],{"name":18,"type":19},"Rechtsinformationssystem des Bundes","product",{"name":21,"type":22},"Federal Chancellery of Austria","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},[],[21,18],{"controls":44,"vendors":45},[],[],{"slug":47,"title":48,"body":49,"framework_refs":50,"framework_notes":61},"austrian-court-rules-unredacted-personal-data-in-government-legal-decisions-violates-privacy-law","Austrian Court Rules Unredacted Personal Data in Government Legal Decisions Violates Privacy Law","An Austrian court found that publishing unredacted personal data — including a police officer's workplace, teaching role, and health information — in official legal decisions on a government website violated privacy law. The root cause was a failure to apply data minimisation principles before publishing sensitive documents publicly, meaning no redaction review process was in place. This matters because even lawful government transparency activities must be balanced against individuals' rights to privacy, particularly when sensitive categories of data (such as health information) are involved. Organisations handling public-facing document publication must treat redaction as a mandatory procedural step, not an afterthought, especially when GDPR obligations apply.",[51,52,53,54,55,56,57,58,59,60],"GDPR Article 5(1)(c) — Data Minimisation","GDPR Article 9 — Processing of Special Categories of Personal Data","GDPR Article 25 — Data Protection by Design and by Default","GDPR Article 35 — Data Protection Impact Assessment (DPIA)","NIST SP 800-53 AC-3 (Access Enforcement)","NIST SP 800-53 MP-3 (Media Marking)","CIS Control 3 — Data Protection","CIS Control 14 — Security Awareness and Skills Training","ISO\u002FIEC 27001 Annex A.8.2 — Information Classification","ITIL Service Design — Information Security Management",{}]