Data Protection Law and Personality Rights

  • Data protection and personality rights in systematic division to labour law
  • Data protection and personality rights in the employment relationship and when employment contracts are constituted and terminated
  • In-company participation when it comes to controlling the employees and processing data in the firm, company or corporation
  • Authorities and data protection proceedings
  • Sanctions if data protection laws are violated and sanction avoidance
  • Data protection management system
  • Duties of care

Mode of delivery

face to face



Recommended or required reading and other learning resources/tools

Brodil (Hrsg.), Aktuelle Rechtsfragen des Datenschutzes, new academic press, Wien 2019;
Brodil (Hrsg.), Entgrenzte Arbeit, Manz, Wien 2016;
Brodil (Hrsg.), Datenschutz im Arbeitsrecht, Manz, Wien 2010;
Rebhahn, Mitarbeiterkontrolle am Arbeitsplatz, Facultas, Wien 2009;
Felten/Goricnik/Riesenecker-Caba, Betriebsrat und Information, Manz, Wien 2017;
Körber-Risak/Brodil (Hrsg.), Datenschutz und Arbeitsrecht, LexisNexs, Wien 2018.
Tomandl/Risak, Wie bewältigt das Recht Moderne Formen der Arbeit? New academic press, Wien 2016.

Planned learning activities and teaching methods

Lecture, group work, presentations, discussions, juridical research, concept development

Assessment methods and criteria

Continuous assessment and final written exam

Prerequisites and co-requisites

Fundamentals of Applied Labour Law


Degree programme

Digital HR & angewandtes Arbeitsrecht



ECTS Credits


Language of instruction




Academic year



2 SS



Learning outcome

After successful completion of the course, the students can

  • determine the current status of science and the established case law to evaluate which data may justifiably be collected during effective employment
  • handle the data of applicants accordingly
  • evaluate how long data may be saved
  • determine which role the works council plays in the context of data protection
  • determine under which circumstances the data of employees may be transmitted within the company and evaluate which sanctions must be relied on, if the data protection laws are violated
  • competently participate in the successful implementation of an in-company data protection management system

Course code