Auf Deutsch lesen

Petition against the planned State Protection Act

Austria is getting a new Surveillance Agency!

Staatsschutz Logo
Arbeitskreis Vorratsdaten Österreich
Das geplante Staatschutzgesetz untergräbt unsere Grundrechte und etabliert eine unkontrollierbare Überwachungsbehörde.

30,078 people voted against the planned State Protection Act

Dear supporters,

over 30,000 of you have signed our petition against the planned State Protection Act, for which we want to extend our sincere gratitude. It was your voices that made it possible to exert pressure on politics and bring the topic to the public's eye. Parliament passed the law in plenary on January 27th, 2016 which will inure on July 1st, 2016. As announced, the Arbeitskreis Vorratsdaten will now bring proceedings before the Constitutional Court.


As an independent, non-profit civil rights organisation, we depend on external help. Our work defending basic rights and freedoms in the digital age is made possible through individual donations from civil society. Therefore, we ask you to support us with a donation.


The Arbeitskreis Vorratsdaten Österreich keeps you informed. If you want to receive news about digital civil rights, feel free to sign up for the newsletter below.

Media report

Sea of lights

Media report

8 important facts about the State Protection Act

  1. Austria gets a new secret service.
  2. The Federal Office for the Protection of the Constitution and Counterterrorism (BVT), which is currently a police department, will soon gain the powers of an intelligence agency.
  3. The BVT will be able to spy on any citizens without having to ask for a permit from a judge or prosecutor.
  4. To estimate the possibility of an "attack endangering the constitution" everyone can be spied upon. Only a justified suspicion of danger is required. However, there are no clear rules on where and how the justification for the existence of a concrete danger has to be recorded in writing and must be submitted.
  5. The BVT can access the data from all authorities and all companies, no judge or prosecutor is needed. The only control instance is the internal officer for the protection of rights of the BMI together with his two deputies. The BVT has the possibility to deny their access to needed informations for various reasons, for example in order to protect the identity of a witness.
  6. The objectives of the BVT are many more than just the defense against terrorism. People acting as whistleblowers, people protesting against right-wing extremists in the Hofburg, or protestors against animal cruelty become the target of authority
  7. Around 100 crimes are defined as attack endangering the constitution, 40 of them if they are committed with religious or ideological motives.
  8. The BVT may store all the data for up to 6 years. The access of this data is stored only for 3 years. Furthermore, all data can be shared with foreign intelligence agencies. Therefore, privacy measures are practically irrelevant.
  9. Austria will soon have 10 new intelligence agencies, because in addition to the BVT also all 9 provinces get their own office with the same powers. Each Governor will soon have his own intelligence agency. The latest version of the draft allows for only a single agency with 9 branches, all of them being coordinated centrally.


  • June 2014 The Ministry of Interior seeks a new Security Act.
  • January 7th, 2015 Terror in Paris shocks the whole world.
  • February 23rd, 2015 The Parliament agrees on the need of new tools for counterterrorism.
  • March 31st, 2015 The BMI releases the bill.
  • April 16th, 2015 The AKVorrat publishes their answer.
  • May 12th, 2015 Deadline for bill answers expires.
  • May 25th, 2015 The Petition agains the new State Protection Act starts.
  • July 1st, 2015 The PStSG arrives at the National Assembly.
  • October 1st, 2015 The AKVorrat organizes a panel discussion.
  • November 13th, 2015 Terror in Paris shocks the whole world.
  • January 11th, 2016 The AKVorrat sets up a camera in front of the Parliament.
  • January 12th, 2016 Attac and the AKVorrat organize a workshop.
  • January 23rd, 2016 The AKVorrat organizes a "sea of lights agains surveillance".
  • January 27th, 2016 The PStSG passes the National Assembly in plenary.
  • February 1st, 2016 The PStSG arrives at the Federal Council.
  • February 11th, 2016 The PStSG passes the Federal Council in plenary.
  • March 9th, 2016 FPÖ and the Greens announce a constitutional complaint.
  • June 28th, 2016 FPÖ and the Greens issue the complaint.
  • July 1st, 2016 The PStSG inures.

Our 5 demands

The signatories to this petition call on the Austrian Government and the Austrian Parliament to act on these five points concerning the planned State Protection Act.

  1. Fact-based protection policy – The State Protection Act needs to return to square one. It has to be reoriented after a comprehensive evaluation of the monitoring situation, determining statistics about investigations, and an evidence-based survey of security needs. Before the federal government may restrict basic rights, it must prove that their project is necessary and proportionate.
  2. Clear separation of police and intelligence services – The State Security should not be part of the police and at the same time be empowered with surveillance rights like a secret agency. Clear responsibilities are required.
  3. No repression against civil society, journalists, and "whistleblowers" – The responsibility/duty of the state security shouldn't be to act on easily constructed low level/minor offenses. The "attack endangering the constitution" should apply only to the most serious crimes and may not restrict general fundamental rights, such as the right to demonstrate or freedom of the press.
  4. Strong legal protection, no "pre-crime" – for every single surveillance measure, a separate, written, evidence-based case should be prepared, presenting reasonable ground for suspicion as well as the commensurability of the intervention, to be approved by a judge. Parliamentary control must be enhanced and the transparency of the activities of the security authorities must be strengthened.
  5. No paid informers – Cases in Austria as well as elsewhere show that the use of "trusted third parties" in legal processes often leads to difficulties – and paid informers often lead to scandalous situations. Austria should learn from the experiences of other countries instead of repeating their mistakes. The use of unpaid "undercover agents" (informers) should be clearly regulated in accordance with the Criminal Procedure Code.


Missing norms

The draft contains a row of insufficiently defined terms, beginning with the definition of its basic purposes. “Advance protection from attacks endangering the constitution” is open to a wide array of interpretations. On the one hand, it could result in improper use of anti-terror clauses in the criminal code by the authorities, on the other hand, due to lack of clear definitions, it is extremely difficult for individual subject to adjust his or her actions accordingly. Another example is the term “ideologically motivated criminal act”. “Ideology” is an emotionally charged term that should not be used in the context of legal norms.

Missing legally required definitions

When a law encroaches directly on basic rights, as the PStSG does, it requires stringent rules so that legal subjects may know in advance what to expect from the authorities. There should also be clear limits to interventional rights, as defined by the European Convention on Human Rights. In detail, such laws may not allow discretionary decisions or latitude of judgement by the authorities (see detailed decisions by the Constitutional Court and the ECHR). The new law shows a series of obvious shortcomings in this respect, as we from AKVorrat have been saying all along.

Missing due procedure

Although both political parties in government have repeatedly said that a thorough evaluation was done and intensive debates held, there is not much to show for it. Advance consultations were not held publicly, and the many critical advisory opinions that were given once the draft was made public have not found entry into the final legislation. Minor changes were made, but only on those points that had aroused critical statements by the media, and most of them were cosmetic. Basic criticism was deftly evaded. The compromises that were struck shortly before the final reading of the law in full session could neither be thoroughly discussed nor evaluated in the remaining time, members therefore had to vote at short notice on a basic law, with no proper evaluation of the far-reaching consequences – the final text reached members desks a day before the final reading.

Missing evaluation of possible consequences

We from AKVorrat have long demanded a full joint evaluation of all surveillance measures that would evaluate all measures, as defined by different laws, as to their conformity with basic rights. We are currently developing a catalogue (HEAT) as a means to evaluate all terror-related laws in Austria. No such evaluation was held for the State Protection Law, so nobody can really answer the question: Is this deep encroachment in our basic rights really justified, is this law really necessary, is it worth the price we are paying.


State protection instead of Constitutional Protection

In the final text, the state is defined only as the sum of the state institutions that should be protected. Protection of the constitution and the fundamental rights of the population seem no longer to part of the duties of the BVT.

Potential for abuse due to redundancies

The Federal Office and local offices affiliated with local state police headquarters will continue to be security agencies. As such, they should be following the strict rules defined by PStSG; but as they act as part of local police, they only have to follow the less strict rules of SPG. This would result in one and he same authority acting on the basis of two separate laws: An official can choose whether he needs to get a judge's permission to demand telecommunications data from an internet service provider or not. He could, in theory, decide that following stricter rules, he may require an ISP to provide all connection data (which is not permitted as a simple police inquiry), once a “religious or ideological motivation” is assumed in an offense, thus bypassing the legal protection that lawmakers originally intended.

No judicial control

The final text provides for permission (by majority) by a legal protection senate only for two measures (undercover enquiries and wire taps), all other surveillance measures require a simple permission. There is no control by an independent judiciary. At the same time, the same government presented a law for enquiries in financial transactions, which includes supervision by independent judges from the Federal Court of Finance plus additional supervision by the office of legal protection.

To widely defined offence catalogue

For one and the same offence, different enquiry empowerments may be used. If a “religious” or “ideological” motivation is suspected, authorities may choose from a wide arsenal of means. Minor offences (such as vilification of state symbols) have been eradicated, but there are still offences that have nothing to do with anti-democratic acts or acts against the state. For instance, completely apolitical soccer fans may become a target for surveillance if they communicate electronically with somebody that the authorities deem as somebody that might set a criminal act such as breach of the public peace, (§ 274 section 2 of the Penal Code).

Insufficient definition of “attacks endangering the constitution” (§ 6 section 1 PStSG)

Paragraph 6 PStSG, defining the duties and responsibilities of the newly created authority, is of central importance. Apart from a very unclear second section as to what exactly is to be understood by “preventive protection”, authorities may become active long before any criminal deed is impending or has occurred, using all possibilities vested by the new law.

Far-reaching opportunities for data collection and processing

The collection of personal data of suspects and their contact persons will be allowed for “assessment of the likelihood of a hazard” in the future. § 10 / 5 for instance previews interpretation of all data from “all available sources (…) for instance by tapping all available data on the internet”. A delimitation to a dragnet investigation (not provided for by the SStGS) seems very difficult, to say the least. There is no provision for a clear documentary obligation (for instance in a written report) of measures taken for procedural purposes. This means that the target subject’s entire internet usage may be collected and evaluated. This implies that most warrants for (undercover) investigations are not linked to a specific crime or suspicion of a crime. It suffices if authorities want to analyze an abstract risk scenario. This comprehensive collection of data on potentially each and every one of us may be stored for six years. The circumstances under which this date is deleted are unclear and badly formulated, especially since they may not be deleted if there is “sufficient suspicion that a person or a group of persons might give reason again (…) for further surveillance”. In particular there is no provision (and this is particularly disquieting) for the concerned subject him- or herself to demand deletion of the concerned data sets. There is furthermore no procedural mechanism for regular control and assessment of commensurability of storing concerned data. The commissioner for legal relief and protection has access to the data base, but may not access stored data on trusted third party person-related data according to § 12 / 7.

Numerous technical surveillance possibilities

The use of tracking devices and IMSI-catchers will be permitted if the observation would otherwise be very difficult or else considered hopeless. Here, too, it is not defined how the fact is supposed to be proven. Furthermore, there are no provisions on how to eliminate abuse of such catchers, as the ones freely available are all capable of content surveillance, without the surveyed subject’s notice.

The periods for the permitted use of such special investigative means will be increased. According to the old law of the Code of Criminal Procedure, maximum period is three months, under condition of a court order. Under the new legal system of PStSG even six months are possible, and all it takes to prolong the observation is the approval of the officer for the protection of rights at the Interior Ministry. Repeated prolongations are also possible.

Missing legal protection

The majority of surveillance possibilities given in respect to storing person-related data in the central data base show legal protection deficits. In general, given provisions for legal protection do not fulfil their purpose and do not counter balance the high intensity surveillance possibilities available through this law.

Paid informers

The legalization of paid undercover agents without judicial review is also extremely problematic. The current draft of the law shows very little sensitivity to issues such as the entrapment, and it draws no lessons from the huge scandal involving the NSUmurders in Germany.

Police and intelligence services in a single authority

Due to the extremely vague definition of an “attack endangering the constitution” and the expansion of surveillance powers to the “evaluation of the likelihood of a threat”, a police force with the powers of an intelligence service is created. The principle of mandatory prosecution of offenses and the principle of opportunity are being breached. The BVT and - even worse - the federal offices become uncontrollable authorities with officials who are subject to almost no limits in their operations and don't have to answer to anyone. The next police scandal in BVT is inevitable.

Many evaluations, no reaction

Overall there were eighteen critical evaluations of the State Protection Law. They were from the Union of Judges, Amnesty International, the Chamber of Workers, the Chamber of Commerce, the Austrian Conference of Bishops, the Lutheran Evangelical Church, the Chamber of Medical Doctors, the Association of ISPs, the Chamber of Lawyers, the Parliamentary Ombudsman, journalists, several NGOs, trade unions, and AKVorrat. Many evaluations had serious provisos, some questioned the entire law itself. The only positive evaluations came from other ministries or state (Länder) governments, none of them had more than three pages A4 of explanatory text.



With the vague definition of attack(s) endangering the constitution, the law creates the basis for the excessive surveillance of innocent citizens. Although such serious intrusions into privacy require careful control, no efficient legal mechanisms have been provided. A feigned reason justifies the means. According to the AKVorrat, the bill creates the basis for a domestic intelligence agency and therefore it is rejected entirely. At the same time AKVorrat acknowledges that counter-terrorism measures are needed. This, however, should be drafted in an open dialogue with stakeholders and evaluated very closely in terms of effectiveness and with respect for fundamental rights.