Skip to main content

    AI by country · Western Europe

    AI in Austria: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Austria know before starting with AI?

    In Austria, AI that uses personal data falls under the GDPR and the Datenschutzgesetz (DSG), supervised by the Datenschutzbehörde (DSB). The EU AI Act applies in stages, but Austria had not named its main AI Act market surveillance authority as of our last check; the federal government said in June 2026 that a draft implementing law was being coordinated. The RTR's AI Service Desk is the public information point in the meantime.

    At a glance

    Austria at a glance

    Key facts about Austria
    Data protection lawGDPR and the Datenschutzgesetz (DSG)
    RegulatorDatenschutzbehörde (DSB); RTR AI Service Desk as information point
    AI policyEU AI Act applies; national implementing law and main AI authority not yet confirmed as of 29 October 2026; AI strategy AIM AT 2030
    Time zoneCET, UTC+1 in winter; CEST, UTC+2 in summer (India is 4.5 or 3.5 hours ahead)
    CurrencyEUR (euro)
    Business languageGerman; English is common in international business

    Why now

    Why Austria is worth watching

    Each point links to the document it comes from.

    • Statistik Austria reports that 30% of Austrian enterprises used AI in 2025, against 20% across the EU, up from 9% in 2021.[7]

    • Of Austrian firms not using AI, 77% had never considered it; those that had cited missing expertise (15%), data protection concerns (11%) and legal uncertainty (11%).[7]

    • In a reply to Parliament dated 2 June 2026, the Federal Chancellor said a draft national AI Act implementing law, including sanctions, was being coordinated between ministries.[4]

    • On 23 September 2026 the Nationalrat passed changes to the General Administrative Procedure Act to allow AI in administrative procedures, including some fully automated decisions with a right to object.[8]

    • Most of the EU AI Act applies from 2 August 2026, and the AI Omnibus moved high-risk rules for Annex III uses to 2 December 2027.[2]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    GDPR and the Datenschutzgesetz (DSG)

    In force2018The DSB says that when AI processes personal data, the GDPR and the DSG apply alongside the AI Act. The organisation that deploys an AI system is usually the controller, even if a vendor built it. Under Article 22 GDPR people have the right not to be subject to decisions based solely on automated processing with legal or similarly significant effects, and the DSB gives automatic rejection of job applications as an example.[1]

    EU AI Act, Regulation (EU) 2024/1689, as amended by the AI Omnibus

    Phased2024Banned practices and AI literacy have applied since 2 February 2025, general-purpose AI rules since 2 August 2025, and most other rules, such as chatbot transparency, from 2 August 2026. The AI Omnibus, in force since 27 July 2026, moved high-risk rules to 2 December 2027 for Annex III uses and 2 August 2028 for AI in regulated products.[2]

    Austrian AI Act implementing law

    Draft2026The deadline to name authorities was 2 August 2025. As of June 2026 a draft was still being coordinated, and the DSB says it is not yet fixed who the main authority will be. Under current law the DSB covers certain high-risk areas such as law enforcement, justice and democratic processes. The Commission listed no Austrian contact point on 7 September 2026.[4]

    AVG and VStG amendment on AI in administrative procedures

    Passed, not yet in force2026Passed by the Nationalrat on 23 September 2026. It allows chatbots to help people file applications and fully automated decisions in clearly limited cases, which must be labelled; people can object within two weeks and a person then decides again. We did not confirm the date it takes effect.[8]

    Where AI fits first

    Where AI fits first

    Banking and credit

    Document checks and support for credit decisions, with staff deciding.

    The government says the AI Act adds to existing financial supervision rather than replacing it. AI credit scoring is high-risk under Annex III from 2 December 2027.[4]

    Recruitment and HR

    Summarising applications and scheduling interviews, with a recruiter deciding.

    The DSB says automatically rejecting job applications may fall under Article 22 GDPR, so keep a person in the decision.[1]

    Public administration

    Chatbots for applications and automated routine notices such as fees.

    The September 2026 AVG amendment sets the frame for this, with labelling and a two-week right to object.[8]

    Media and online services

    AI-assisted content production and labelling of generated content.

    The RTR AI Service Desk gives information on AI in the media sector and runs an AI Act chatbot. AI Act transparency duties for generated content apply from August 2026.[6]

    Your first steps

    Your first steps

    1. List each AI system and sort it into an AI Act risk category; the RTR AI Service Desk's materials can help.
    2. Treat yourself as the data controller for AI tools you deploy, and check whether personal data goes to the vendor.
    3. Keep a person in any decision about applicants, customers or citizens that has a significant effect.
    4. Run a data protection impact assessment before deploying AI that profiles people.
    5. Train staff in AI literacy, which the AI Act has required since 2 February 2025.
    6. If personal data will be accessed from India or another non-EU country, put a GDPR transfer mechanism in place first.
    7. Watch for the Austrian AI Act implementing law to learn which authority will supervise you.

    AI services for Austria

    AI consulting and development for teams in Austria

    We work remotely with companies in Austria, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. India (UTC+5:30) works 9:30 to 18:30, which is 04:00 to 13:00 UTC. In Austrian winter (UTC+1) that gives about 5 hours of overlap, 09:00 to 14:00 Vienna time; in summer (UTC+2) about 6 hours, 09:00 to 15:00. India has no EU adequacy decision, so any personal data we access from India needs a GDPR transfer mechanism such as standard contractual clauses.

    Questions

    Common questions about AI in Austria

    Who enforces the AI Act in Austria?

    Not settled as of our last check. The DSB says it is not yet fixed who the main authority will be, and the federal government said in June 2026 that a draft law was being coordinated. The DSB already covers certain high-risk areas under current law.

    Do AI Act duties apply without an Austrian authority?

    Yes. The AI Act is an EU regulation and applies directly. The missing authority affects supervision and complaints, not the duties themselves.

    Who is responsible if we use a vendor's AI tool?

    Usually you. The DSB says the organisation that decides on the purposes and means of processing is the controller, even if the technology comes from a provider.

    When do the high-risk AI rules start?

    On 2 December 2027 for Annex III uses such as hiring and credit scoring, and 2 August 2028 for AI in regulated products, after the EU AI Omnibus changed the dates.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Datenschutzbehörde (DSB), 2026-10-29. Künstliche Intelligenz & Datenschutz(dsb.gv.at)
      Full title and what we used it for

      Künstliche Intelligenz & Datenschutz. Primary (German), accessed on this date; no page date shown. Used for the GDPR and DSG applying to AI, the deployer as controller, Article 22 and the job application example, the DSB's current role for certain high-risk areas, and that the main AI Act authority is not yet fixed.

    2. [2] European Commission, 2026-10-19. AI Act: regulatory framework for AI(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      AI Act: regulatory framework for AI. Primary. Used for the AI Act timeline and the AI Omnibus, which the page says entered into force on 27 July 2026. We could not open EUR-Lex directly.

    3. [3] European Commission, 2026-09-07. Market Surveillance Authorities under the AI Act(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      Market Surveillance Authorities under the AI Act. Primary. Used to note that no Austrian single point of contact was listed.

    4. [4] Federal Chancellery, via the Austrian Parliament, 2026-06-02. Anfragebeantwortung 5056/AB zu 5639/J: Wo bleibt die Umsetzung des AI A…(parlament.gv.at)
      Full title and what we used it for

      Anfragebeantwortung 5056/AB zu 5639/J: Wo bleibt die Umsetzung des AI Acts?. Primary (German). Used for the draft implementing law being coordinated, sanctions being part of it, the AI Act supplementing financial supervision, and the reference to AIM AT 2030.

    5. [5] Austrian Parliament, 2025-10-15. Entschließungsantrag 517/A(E): KI-Behörde endlich benennen(parlament.gv.at)
      Full title and what we used it for

      Entschließungsantrag 517/A(E): KI-Behörde endlich benennen. Primary (opposition motion, German). Used for the 2 August 2025 designation deadline and the RTR AI Service Desk set up as preparation. The motion's criticism is the Greens' view.

    6. [6] RTR (Rundfunk und Telekom Regulierungs-GmbH), 2026-10-29. AI Service Desk(rtr.at)
      Full title and what we used it for

      AI Service Desk. Primary, accessed on this date. Used for the service desk's role, legal basis (section 20c KOG and section 194a TKG) and its AI Act chatbot.

    7. [7] Statistik Austria, 2026-06-24. Österreichs Unternehmen beim Einsatz von künstlicher Intelligenz im EU-…(statistik.at)
      Full title and what we used it for

      Österreichs Unternehmen beim Einsatz von künstlicher Intelligenz im EU-Spitzenfeld (press release). Primary (German). Used for AI use by 30% of enterprises in 2025 (EU 20%, Austria 9% in 2021) and the reasons for not using AI.

    8. [8] Austrian Parliament (Parlamentskorrespondenz), 2026-09-23. Nationalrat schafft rechtliche Grundlagen für KI in Verwaltungsverfahre…(parlament.gv.at)
      Full title and what we used it for

      Nationalrat schafft rechtliche Grundlagen für KI in Verwaltungsverfahren (PK0841). Primary (German). Used for the AVG and VStG amendment: chatbots, labelled fully automated decisions and the two-week objection right.

    9. [9] European Commission, 2026-10-29. Adequacy decisions(commission.europa.eu)
      Full title and what we used it for

      Adequacy decisions. Primary, accessed on this date. Used to confirm India has no EU adequacy decision.

    This is general information, not legal advice. Austria's AI Act authority and implementing law were not settled when we checked, and the AVG amendment's start date was not confirmed. Check with a qualified Austrian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Austria?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score