[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdGBqx_GFAsWy3UNeUp9nFAMNfWHQCMJPcOsRod7D2tw":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"89dc2597-8533-45b2-a109-f0c5b2c211b9","OGH - 9ObA120\u002F19s","ogh-9oba120-19s-f1ea31","← Older revision Revision as of 09:47, 24 June 2026 Line 10: Line 10: |ECLI=ECLI:AT:OGH0002:2020:009OBA00120.19S.0122.000 |ECLI=ECLI:AT:OGH0002:2020:009OBA00120.19S.0122.000 |Original_Source_Name_1= |Original_Source_Name_1=RIS |Original_Source_Link_1=https:\u002F\u002Fwww.ris.bka.gv.at\u002FDokument.wxe?Abfrage=Justiz&Gericht=&Rechtssatznummer=&Rechtssatz=&Fundstelle=&AenderungenSeit=Undefined&SucheNachRechtssatz=False&SucheNachText=True&GZ=9ObA120%2f19s&VonDatum=&BisDatum=30.03.2020&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Position=1&SkipToDocumentPage=true&ResultFunctionToken=9dc30ee7-d8ca-4aaa-8738-f757c43133d6&Dokumentnummer=JJT_20200122_OGH0002_009OBA00120_19S0000_000 |Original_Source_Link_1=https:\u002F\u002Fwww.ris.bka.gv.at\u002FDokument.wxe?Abfrage=Justiz&Gericht=&Rechtssatznummer=&Rechtssatz=&Fundstelle=&AenderungenSeit=Undefined&SucheNachRechtssatz=False&SucheNachText=True&GZ=9ObA120%2f19s&VonDatum=&BisDatum=30.03.2020&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Position=1&SkipToDocumentPage=true&ResultFunctionToken=9dc30ee7-d8ca-4aaa-8738-f757c43133d6&Dokumentnummer=JJT_20200122_OGH0002_009OBA00120_19S0000_000 |Original_Source_Language_1=German |Original_Source_Language_1=German","The Austrian Supreme Court ruled that an employer installing and using a GPS system in company vehicles without employee consent or a company agreement can lead to damages for the employee. The employer tracked the employee's vehicle usage, including during leisure time, despite repeated requests to stop. This case highlights the importance of consent and proper procedures when implementing employee monitoring technologies.","Austrian Supreme Court rules employer GPS tracking without consent may lead to damages.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=OGH_-_9ObA120\u002F19s&diff=51986&oldid=38658","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-06-24T09:47:27+00:00","2026-06-24T10:00:13.856115+00:00",7,[17,20],{"name":18,"type":19},"GPS positioning system","product",{"name":21,"type":22},"OGH","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[21,18],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":66},"austrian-court-rules-unauthorized-gps-tracking-of-employees-unlocks-liability-for-damages","Austrian Court Rules Unauthorized GPS Tracking of Employees Unlocks Liability for Damages","An Austrian employer deployed GPS tracking in company vehicles without obtaining employee consent or establishing a formal company agreement, violating both labor law and data protection principles. The tracking extended into employees' leisure time, compounding the privacy violation and demonstrating a failure to respect the boundaries of lawful monitoring. The Austrian Supreme Court's ruling underscores that deploying surveillance technologies without a proper legal basis exposes organizations to significant legal and financial liability. This case matters because employee monitoring is a sensitive intersection of operational need and fundamental privacy rights — both of which require careful, documented governance to balance lawfully.",[56,57,58,59,60,61,62,63,64,65],"GDPR Article 5(1)(a) – Lawfulness, fairness and transparency","GDPR Article 6 – Lawful basis for processing","GDPR Article 9 – Processing of special categories of data","GDPR Article 88 – Processing in the context of employment","NIST SP 800-53 AC-1 – Access Control Policy and Procedures","NIST SP 800-53 PT-1 – Personally Identifiable Information Processing and Transparency Policy","CIS Control 3 – Data Protection","ISO\u002FIEC 29151 – Code of practice for PII protection","ITIL Service Design – Compliance and legal requirements consideration","Austrian Data Protection Act (DSG) § 11 – Employee data processing requirements",{}]