---
title: "Post AG fined EUR 18,000,000 (Austria, 2019)"
canonical: "https://dposchool.com/gdpr/fine/dsb-post-2019-10"
source: "https://dsb.gv.at/aktuelles/vwgh-bestaetigt-unrechtmaessige-verarbeitung-von-partei-affinitaeten-und-setzt-geldbusse-mit-eur-13-mio-fest"
source_note: "Only the authority's decision is authoritative."
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Fine · Austria

# Post AG: EUR 18,000,000

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

- **Authority:** Datenschutzbehörde (Austrian Data Protection Authority)
- **Country:** Austria
- **Date:** Decision of 23 October 2019
- **Amount:** EUR 18,000,000, as imposed (not converted)
- **Appeal status:** Reduced ([source](https://dsb.gv.at/aktuelles/vwgh-bestaetigt-unrechtmaessige-verarbeitung-von-partei-affinitaeten-und-setzt-geldbusse-mit-eur-13-mio-fest))
- **Provisions cited:** [Article 9(1)](https://dposchool.com/gdpr/article/9#1)

## What the fine was for (summary, not the official text)

Calculated and stored 'party affinity' scores (likely political leanings) for about 2.2 million people and sold some, without consent; also reused parcel data for marketing.

Not fully confirmed: The DSB page does not name the company; the name comes from the Federal Administrative Court's own news page (bvwg.gv.at, 3 Dec 2020). History: annulled 2020 on a procedural point, reinstated on further appeal, cut to EUR 16m (27 Dec 2024), finally set at EUR 13m by the Supreme Administrative Court on 24 Jun 2026.

## Official source

- [Decision or announcement of the authority](https://dsb.gv.at/aktuelles/vwgh-bestaetigt-unrechtmaessige-verarbeitung-von-partei-affinitaeten-und-setzt-geldbusse-mit-eur-13-mio-fest)

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Fines](https://dposchool.com/gdpr/fines) / Post AG

[All fines](https://dposchool.com/gdpr/fines)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents