Austrian Post fined €18 million for selling customer data
The Austrian data protection authority (DPA) has imposed an administrative fine of 18 million euros on Austrian Post after conducting administrative fine proceedings.
During an oral hearing, the Austrian DPA heard evidence that Austrian Post, used customers’ data, such as ages and addresses, to calculate a probability of which political party they might support and sold its findings.
In addition, another violation was determined due to the further processing of data on package frequency and the frequency of relocations for the purpose of direct marketing, as this is not covered by the GDPR.
These violations of the GDPR were committed unlawfully and culpably, which is why the above-mentioned administrative fine is appropriate to prevent other or similar violations.
The penalty is not final, as it can be challenged before the Federal Administrative Court within four weeks after the delivery of the penalty notice.
Austrian Post has reportedly said that it will appeal the decision.
