- Declares that, by failing to take all of the measures necessary to ensure that the legislation in force in Austria meets the requirement of independence with regard to the Datenschutzkommission (Data Protection Commission), more specifically by laying down a regulatory framework under which
- the managing member of the Datenschutzkommission is a federal official subject to supervision,
- the office of the Datenschutzkommission is integrated with the departments of the Federal Chancellery, and
- the Federal Chancellor has an unconditional right to information covering all aspects of the work of the Datenschutzkommission,
The Republic of Austria has failed to fulfil its obligations under the second subparagraph of Article 28(1) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
- Orders the Republic of Austria to pay the costs incurred by the European Commission;
- Orders the Federal Republic of Germany and the European Data Protection Supervisor to bear their own respective costs.
36-37, 41, 43-44, 66, 36