Website Rules in Austria
Austrian websites must include an Impressum under the ECG §5 and Mediengesetz §§24-25. The DSB enforces GDPR with a focus on cookies and tracking.
Data protection authority:
Datenschutzbehörde
(DSB)
Requirements
3
country-specific rules
Guides
3
guides available
Specific requirements for Austria
Impressum (ECG §5 + Mediengesetz)
Austrian law requires website identification under ECG §5 (E-Commerce-Gesetz) and media disclosure under Mediengesetz §§24-25. Both must be accessible from every page.
DSB enforcement
The Austrian DSB was the first EU DPA to rule that Google Analytics transfers to the US violated GDPR (January 2022, noyb complaint).
Cookie consent
Austria follows the standard GDPR/ePrivacy approach to cookies. The DSB has aligned with the EDPB guidelines on valid consent.
Enforcement in Austria
The Austrian DSB made international headlines in January 2022 when it ruled — following a noyb complaint — that using Google Analytics violates GDPR because data is transferred to the US without adequate protection. This decision influenced similar rulings across France, Italy, and other EU member states. The DSB has also fined companies for using cookie banners that lacked a clear reject option.
Official resources
Guides for Austria
GDPR Compliance Checklist for Your Website (2026)
A practical GDPR checklist for small business websites. Check cookies, privacy policy, consent forms, and tracking scripts.
Google Fonts and GDPR: Why Your Website Might Be Leaking Data
Loading Google Fonts from Google's servers sends visitor IP addresses to the US. A German court fined a website owner for this. Here is how to fix it.
Do I Need a Cookie Banner? A Simple Decision Guide
Not sure if your website needs a cookie banner? This simple guide helps you decide based on what your website actually does.
Check your website for Austria requirements
Our scanner checks for Austria-specific requirements automatically.