GPSR Compliance in Austria
Austria adds an important layer on top of standard EU GPSR obligations: the Offenlegungspflicht under the Mediengesetz, a uniquely Austrian disclosure requirement. Combined with BMAW market surveillance and local district enforcement, here's what online stores need to know.
€36,336
Max fine per violation
Top 10
EU ecommerce ranking
6.5 million
Online shoppers AT
Dec 2024
GPSR in force since
Who enforces GPSR in Austria?
Austria uses a federal-local model: BMAW sets policy and coordinates market surveillance at the national level, while local district authorities carry out inspections, impose penalties, and order product withdrawals. This decentralised structure means enforcement intensity can vary by region.
Market surveillance coordination
BMAW
The Bundesministerium für Digitalisierung und Wirtschaftsstandort coordinates product safety policy and market surveillance across Austria. BMAW liaises with EU-level RAPEX (Safety Gate) for cross-border product recall coordination and sets enforcement priorities for the Bezirksverwaltungsbehörden.
Local enforcement & inspections
Bezirksverwaltungsbehörden
District administrative authorities carry out the actual product safety inspections, impose fines under the PSG 2004, and order product withdrawals. They handle complaints from consumers and initiate enforcement proceedings against non-compliant sellers operating in their jurisdiction.
GDPR & data protection
Datenschutzbehörde (DSB)
Austria's data protection authority enforces GDPR, including cookie consent, privacy notices, and cross-border data transfers. The DSB has taken action against non-compliant cookie banners and actively investigates complaints filed via the EU's cross-border complaint mechanism.
Customs & border control
Finanzverwaltung
Austrian customs intercepts non-compliant products arriving from outside the EU. Goods lacking CE marking, missing required documentation, or failing product safety standards can be held at the border. This applies to direct-to-consumer shipments as well as commercial imports.
The Offenlegungspflicht is Austria-specific — most compliance tools miss it
Unlike standard EU Impressum requirements, Austria's Offenlegungspflicht under §25 Mediengesetz requires additional disclosure of the website's editorial purpose and ownership structure. Many ecommerce compliance checklists are based on German law and omit this requirement entirely. Stores that comply with German GPSR requirements are often still non-compliant under Austrian media law.
Austria-specific compliance requirements
These requirements combine GPSR obligations with Austria's ECG (E-Commerce-Gesetz), PSG 2004 (Produktsicherheitsgesetz), and the Mediengesetz. All apply simultaneously.
Product information in German
CRITICALGerman is Austria's official language and is required for all consumer-facing product content. Safety warnings, instructions, and product information must be in German. This includes content on product pages, in packaging inserts, and in any safety-related communications. Austrian authorities treat missing or incomplete German-language information as a serious violation.
Impressum (legal notice)
CRITICALUnder Austria's E-Commerce-Gesetz (ECG), online stores must display a clearly accessible Impressum with the company's full legal name, registered address, trade register number, VAT ID (UID), contact email, and the supervisory authority if applicable. The Impressum must be reachable from every page of the store.
Offenlegungspflicht (§25 Mediengesetz)
CRITICALAustria's Mediengesetz requires a disclosure notice stating the owner of the website, the editorial purpose, and who is responsible for content. This is distinct from the Impressum and is uniquely Austrian — stores targeting Austrian consumers must include this even if they already have a compliant Impressum. It is typically placed on the same legal page or a dedicated /offenlegung path.
Manufacturer or responsible person details on product pages
CRITICALEvery product listing must display the name, registered address, and contact details of the manufacturer or the EU responsible person. Austrian enforcement authorities specifically check for this during market surveillance operations. Missing details are treated as a critical GPSR violation.
Product traceability identifiers
IMPORTANTEach product must carry a model or article reference that allows traceability back to the manufacturer. Under GPSR, this is required to enable swift action in recall situations. Austrian Bezirksverwaltungsbehörden look for this during product safety checks.
GDPR compliance and cookie consent
IMPORTANTAustria's Datenschutzbehörde (DSB) is one of the more active EU data protection authorities and has issued fines for inadequate cookie consent mechanisms. Cookie banners must offer a genuine opt-out, and the privacy policy must list the DSB as the supervisory authority and explain all data processing activities in German.
The EU Responsible Person for non-EU sellers
If your business is based outside the EU — whether in the UK, US, China, or elsewhere — and you sell physical products to Austrian consumers, GPSR Article 4 requires you to have an EU-established responsible person. This person handles safety reporting, recall coordination, and communication with Austrian authorities on your behalf.
Importer
An EU-based company that purchases your products and resells them within the EU. The importer automatically becomes the responsible person and must have their details visible on product pages.
Authorised representative
A company or individual formally mandated via a written appointment to act as your EU responsible person. They handle regulatory communication with Austrian authorities on your behalf.
Fulfilment service provider
An EU-based warehouse or fulfilment centre that physically handles your products can serve as responsible person under GPSR. Practical for non-EU brands using EU logistics.
Check your compliance for the Austrian market
Run a free GPSR + EAA compliance scan. Get a severity-ranked report of what needs fixing — including Austria-specific requirements like the Offenlegungspflicht.
Scan your store for free
Enter any page URL from your store. Your homepage is a good starting point.
No account required · Results in ~60 seconds · First scan free
Frequently asked questions
Who enforces GPSR in Austria?
GPSR is enforced through Austria's PSG 2004 (Produktsicherheitsgesetz). BMAW coordinates national market surveillance policy, while local Bezirksverwaltungsbehörden carry out inspections and impose fines. The decentralised structure means enforcement varies by district, but BMAW coordinates recall-related activity at the federal level via RAPEX (Safety Gate).
What is the Offenlegungspflicht and does it apply to online shops?
Yes. Austria's Mediengesetz §25 requires all websites targeting Austrian audiences to disclose the owner, the purpose of the website, and who is responsible for its content — in addition to the standard Impressum. This is uniquely Austrian and does not apply in Germany, even though both countries share the same language. Violations are handled separately from GPSR under Austrian media law.
What are the fines for GPSR violations in Austria?
Under Austria's PSG 2004, serious product safety violations can result in fines up to €36,336 per infraction. Separate fines apply for Impressum violations under the ECG, for Offenlegungspflicht violations under the Mediengesetz, and for GDPR breaches under the Datenschutzbehörde's enforcement regime.
Do I need German-language product information for Austria?
Yes. Product safety information, warnings, and instructions must be in German for the Austrian market. Austrian German is the official standard — while broadly the same as standard German, legal documents should be tailored for Austria (especially AGBs, which must reference Austrian law and the appropriate Austrian courts as place of jurisdiction).