Who do I complain to about the GDPR in Austria?

Datenschutzbehörde. You may also complain in the country where you live or work, or where the breach took place (Article 77).

Can Datenschutzbehörde fine a company?

Yes. The authority can impose administrative fines of up to 20 million euro or 4 % of global annual turnover, whichever is higher (Article 83).

What if the company is based in another EU country?

The authority where the company has its main establishment leads the case, and cooperates with the others (Article 56).

GDPR authority in Austria

Datenschutzbehörde is the authority that supervises the GDPR in Austria.

Austrian Data Protection Authority

Official website: https://dsb.gv.at/

What the authority does under the GDPR

Monitors and enforces the GDPR in the country (Articles 51 and 57).
Handles complaints from people whose personal data is processed (Article 77).
Can order changes, ban processing and impose fines (Article 58 and Article 83).
Acts as lead authority when a company's main establishment in the EU is in the country (Article 56).

Questions and answers

Who do I complain to about the GDPR in Austria?: Datenschutzbehörde. You may also complain in the country where you live or work, or where the breach took place (Article 77).
Can Datenschutzbehörde fine a company?: Yes. The authority can impose administrative fines of up to 20 million euro or 4 % of global annual turnover, whichever is higher (Article 83).
What if the company is based in another EU country?: The authority where the company has its main establishment leads the case, and cooperates with the others (Article 56).

Read the GDPR article by article · Population of Austria (Eurostat)

Authorities in other countries

Country	Authority
Belgium	Belgian Data Protection Authority
Bulgaria	Commission for Personal Data Protection
Croatia	AZOP
Cyprus	Commissioner for Personal Data Protection
Czechia	Úřad pro ochranu osobních údajů
Denmark	Datatilsynet
Estonia	Andmekaitse Inspektsioon
Finland	Tietosuojavaltuutetun toimisto
France	CNIL
Germany	BfDI
Greece	Hellenic Data Protection Authority
Hungary	NAIH
Ireland	Data Protection Commission
Italy	Italian Data Protection Authority
Latvia	Datu valsts inspekcija
Lithuania	State Data Protection Inspectorate
Luxembourg	CNPD
Malta	Information and Data Protection Commissioner
Netherlands	Autoriteit Persoonsgegevens
Poland	UODO
Portugal	CNPD
Romania	National Supervisory Authority for Personal Data Processing
Slovakia	Office for Personal Data Protection of the Slovak Republic
Slovenia	Informacijski pooblaščenec
Spain	AEPD
Sweden	IMY
Norway	Datatilsynet

Source: EDPB member list and Regulation (EU) 2016/679. Reviewed 2026-10-12.

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.