{"id":7166,"date":"2025-03-05T09:00:19","date_gmt":"2025-03-05T08:00:19","guid":{"rendered":"https:\/\/atb.law\/?post_type=blog-post&#038;p=7166"},"modified":"2025-03-14T10:33:39","modified_gmt":"2025-03-14T09:33:39","slug":"data-protection-violations-by-google-reviews-current-court-decision","status":"publish","type":"blog-post","link":"https:\/\/atb.law\/en\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/","title":{"rendered":"Data privacy violations through Google reviews: Current court decision"},"content":{"rendered":"<h2 data-pm-slice=\"1 1 []\" id=\"page-sachverhalt\"><strong>Facts<\/strong><\/h2>\n<p>In August 2023, a female patient left a negative review of a specialist's practice on Google. In her review, she expressed criticism regarding her treatment. The specialist concerned responded with a detailed reply in which he disclosed, among other things, the patient's medical diagnosis (\u201eirritation of a tendon insertion\u201c).<\/p>\n<p>The Data Protection Authority (DPA) became aware of this incident and initiated administrative penalty proceedings against the doctor. The DPA considered the publication of the diagnosis to be a violation of the General Data Protection Regulation (GDPR), as it constituted unlawful processing of special categories of personal data (health data).<\/p>\n<h2 id=\"page-entscheidung-des-bundesverwaltungsgerichts\"><strong>Decision of the Federal Administrative Court<\/strong><\/h2>\n<p>The Federal Administrative Court largely upheld the decision of the Data Protection Authority, but reduced the fine. The following key points were established:<\/p>\n<ul data-spread=\"false\">\n<li><strong>Unlawful processing of health data:<\/strong> The specialist's publication of the diagnosis in a Google response constituted a processing of special categories of personal data, which is only permitted under certain conditions (Art. 9(2) GDPR). None of these exceptions were met in the present case.<\/li>\n<li><strong>No justifying legitimate interest:<\/strong> The doctor argued that he had to defend himself against a negative review. However, the court ruled that this was not a sufficient justification for publishing the sensitive health data.<\/li>\n<li><strong>Principle of data minimization violated:<\/strong> According to Art. 5 (1) lit. c GDPR, personal data may only be used to the extent necessary for the purpose of the processing. Mentioning the diagnosis was not necessary to respond to the criticism.<\/li>\n<li><strong>Extenuating circumstances:<\/strong> The doctor had deleted the response to the Google review at the request of the data protection authority and showed cooperation during the proceedings. These circumstances led to a reduction of the original fine from 4,000 euros to 3,000 euros.<\/li>\n<\/ul>\n<h2 id=\"page-rechtliche-bewertung-und-auswirkungen\"><strong>Legal assessment and implications<\/strong><\/h2>\n<p>The decision of the BVwG underlines that companies and service providers must strictly comply with the GDPR when handling online reviews. The publication of sensitive personal data such as health information is particularly delicate. The following points are especially relevant for companies:<\/p>\n<h3 id=\"page-1-antworten-auf-google-rezensionen-mit-bedacht-formulieren\"><strong>1. Carefully craft responses to Google reviews<\/strong><\/h3>\n<p>Companies must not disclose personal data of their customers or patients in public review responses. A factual, general response without disclosing sensitive information is legally safer.<\/p>\n<h3 id=\"page-2-datenschutzrechtliche-schulung-der-mitarbeiter\"><strong>2. Data protection training for employees<\/strong><\/h3>\n<p>All employees who handle online reviews should be trained on data protection regulations. This helps avoid costly penalties.<\/p>\n<h3 id=\"page-3-nutzung-interner-kommunikationswege\"><strong>3. Use of internal communication channels<\/strong><\/h3>\n<p>If a review addresses sensitive topics, it is advisable to contact the person concerned directly rather than publicly. This helps prevent data privacy violations.<\/p>\n<h3 id=\"page-4-rechtliche-beratung-bei-kritischen-bewertungen\"><strong>4. Legal advice regarding critical reviews<\/strong><\/h3>\n<p>Companies, especially in the healthcare sector, should seek legal advice in case of doubt before responding to negative reviews. Data protection violations can lead to severe penalties.<\/p>\n<h3 id=\"page-5-beantragung-der-loschung-unzulassiger-rezensionen\"><strong>5. Requesting the removal of inadmissible reviews<\/strong><\/h3>\n<p>If a review itself violates data protection regulations, its deletion can be requested from Google.<\/p>\n<h2 id=\"page-fazit\"><strong>Conclusion<\/strong><\/h2>\n<p>The decision of the Federal Administrative Court is an important indication of how sensitively personal data must be handled in online reviews. Healthcare providers in particular should be aware that merely mentioning a diagnosis can constitute a GDPR violation. Companies should therefore implement strict data protection guidelines for handling Google reviews to avoid costly sanctions.<\/p>\n<p>ATB.LAW offers comprehensive support in the areas of data protection, compliance, and litigation. Contact us by email at <a href=\"mailto:taudes@atb.law\">taudes@atb.law<\/a><a> or by phone at <\/a><a href=\"tel:0043 1 3912345\">+43 1 3912345<\/a>.<\/p>","protected":false},"template":"","categories":[29],"class_list":["post-7166","blog-post","type-blog-post","status-publish","has-post-thumbnail","hentry","category-datenschutz-und-ki"],"acf":[],"post-kategorie":"29","_post-kategorie":"field_66d947537140a","post-kurzbeschreibung":"Bundesverwaltungsgericht verh\u00e4ngt Geldstrafe wegen Ver\u00f6ffentlichung medizinischer Informationen in Antwort auf negative Rezession","_post-kurzbeschreibung":"field_66d949fe1efe2","post-beitragsbild":"7167","_post-beitragsbild":"field_66d94a4a1efe3","post-author_post-author-name":"Roman Taudes","_post-author_post-author-name":"field_66d94a801efe5","post-author_post-author-foto":"5985","_post-author_post-author-foto":"field_66d94aa11efe6","post-author":"","_post-author":"field_66d94ee2827ca","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Datenschutzverletzung durch Google Rezession -&gt; ATB.LAW<\/title>\n<meta name=\"description\" content=\"Google-Rezensionen und Datenschutz: Was Unternehmen wissen m\u00fcssen! Erfahren Sie, wie Sie DSGVO-Verst\u00f6\u00dfe vermeiden, welche Strafen drohen und welche Rechte Betroffene haben.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atb.law\/en\/blog-post\/data-protection-violations-by-google-reviews-current-court-decision\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Datenschutzverletzung durch Google Rezession -&gt; ATB.LAW\" \/>\n<meta property=\"og:description\" content=\"Google-Rezensionen und Datenschutz: Was Unternehmen wissen m\u00fcssen! Erfahren Sie, wie Sie DSGVO-Verst\u00f6\u00dfe vermeiden, welche Strafen drohen und welche Rechte Betroffene haben.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atb.law\/en\/blog-post\/data-protection-violations-by-google-reviews-current-court-decision\/\" \/>\n<meta property=\"og:site_name\" content=\"ATB.LAW\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-14T09:33:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/atb.law\/wp-content\/uploads\/2025\/03\/Datenschutz-Google-Rezession.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2496\" \/>\n\t<meta property=\"og:image:height\" content=\"1664\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/\",\"name\":\"Datenschutzverletzung durch Google Rezession -> ATB.LAW\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/Datenschutz-Google-Rezession.jpg\",\"datePublished\":\"2025-03-05T08:00:19+00:00\",\"dateModified\":\"2025-03-14T09:33:39+00:00\",\"description\":\"Google-Rezensionen und Datenschutz: Was Unternehmen wissen m\u00fcssen! Erfahren Sie, wie Sie DSGVO-Verst\u00f6\u00dfe vermeiden, welche Strafen drohen und welche Rechte Betroffene haben.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/#primaryimage\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/Datenschutz-Google-Rezession.jpg\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/Datenschutz-Google-Rezession.jpg\",\"width\":2496,\"height\":1664},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/atb.law\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Datenschutzverst\u00f6\u00dfe durch Google-Rezensionen: Aktuelle Gerichtsentscheidung\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/atb.law\\\/#website\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"name\":\"atb Rechtsanw\u00e4lte\",\"description\":\"Rechtsanwaltskanzlei in Wien\",\"publisher\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/atb.law\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\",\"name\":\"atb Rechtsanw\u00e4lte\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"width\":1572,\"height\":1110,\"caption\":\"atb Rechtsanw\u00e4lte\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data privacy breach by Google review -&gt; ATB.LAW","description":"Google Reviews and Data Privacy: What Businesses Need to Know! Learn how to avoid GDPR violations, the potential penalties, and the rights of data subjects.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atb.law\/en\/blog-post\/data-protection-violations-by-google-reviews-current-court-decision\/","og_locale":"en_US","og_type":"article","og_title":"Datenschutzverletzung durch Google Rezession -> ATB.LAW","og_description":"Google-Rezensionen und Datenschutz: Was Unternehmen wissen m\u00fcssen! Erfahren Sie, wie Sie DSGVO-Verst\u00f6\u00dfe vermeiden, welche Strafen drohen und welche Rechte Betroffene haben.","og_url":"https:\/\/atb.law\/en\/blog-post\/data-protection-violations-by-google-reviews-current-court-decision\/","og_site_name":"ATB.LAW","article_modified_time":"2025-03-14T09:33:39+00:00","og_image":[{"width":2496,"height":1664,"url":"https:\/\/atb.law\/wp-content\/uploads\/2025\/03\/Datenschutz-Google-Rezession.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/","url":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/","name":"Data privacy breach by Google review -&gt; ATB.LAW","isPartOf":{"@id":"https:\/\/atb.law\/#website"},"primaryImageOfPage":{"@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/#primaryimage"},"image":{"@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/#primaryimage"},"thumbnailUrl":"https:\/\/atb.law\/wp-content\/uploads\/2025\/03\/Datenschutz-Google-Rezession.jpg","datePublished":"2025-03-05T08:00:19+00:00","dateModified":"2025-03-14T09:33:39+00:00","description":"Google Reviews and Data Privacy: What Businesses Need to Know! Learn how to avoid GDPR violations, the potential penalties, and the rights of data subjects.","breadcrumb":{"@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/#primaryimage","url":"https:\/\/atb.law\/wp-content\/uploads\/2025\/03\/Datenschutz-Google-Rezession.jpg","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2025\/03\/Datenschutz-Google-Rezession.jpg","width":2496,"height":1664},{"@type":"BreadcrumbList","@id":"https:\/\/atb.law\/blog-post\/datenschutzverstoesse-durch-google-rezensionen-aktuelle-gerichtsentscheidung\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atb.law\/"},{"@type":"ListItem","position":2,"name":"Datenschutzverst\u00f6\u00dfe durch Google-Rezensionen: Aktuelle Gerichtsentscheidung"}]},{"@type":"WebSite","@id":"https:\/\/atb.law\/#website","url":"https:\/\/atb.law\/","name":"atb Attorneys at Law","description":"Law firm in Vienna","publisher":{"@id":"https:\/\/atb.law\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atb.law\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atb.law\/#organization","name":"atb Attorneys at Law","url":"https:\/\/atb.law\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/","url":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","width":1572,"height":1110,"caption":"atb Rechtsanw\u00e4lte"},"image":{"@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/blog-post\/7166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/blog-post"}],"about":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/types\/blog-post"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media\/7167"}],"wp:attachment":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media?parent=7166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/categories?post=7166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}