Austria - Public Sector Digital Transformation

Digital Austria Act

Digital Austria Act (Digital Austria Act / Digitales Arbeitsprogramm der Bundesregierung)

Austria

RAI-AT-NA-DADADXX-2023
Adopted(Adopted)As published at bundeskanzleramt.gv.at · checked 10 Sep 2026

Austria - Public Sector Digital Transformation is Adopted in Austria as of 10 Sep 2026, according to bundeskanzleramt.gv.at.

PolicyGovernance and OversightData Protection and PrivacyCybersecurity and Model Security
Export PDF

The Digital Austria Act (DAA) is the Austrian federal government's cross-portfolio digital working programme adopted by the Cabinet on 1 June 2023. It bundles 117 measures and 36 guiding principles to accelerate digital transformation across public administration, healthcare, infrastructure, skills and innovation while protecting data protection, accessibility and fundamental rights.

Summary

The Digital Austria Act (DAA), presented to and adopted by the Austrian Federal Government on 1 June 2023, is a strategic, cross-ministerial policy package that consolidates 117 concrete measures and 36 digitalisation principles to guide Austria’s public-sector digital transformation. The DAA updates earlier strategies such as the 2018 Digital Roadmap and aligns Austria’s national activities with the EU Digital Decade objectives. Core aims include modernising public administration through a "Smart Government" approach, enhancing digital connectivity and cyber resilience, expanding digital health services (including the electronic health record ELGA), strengthening digital skills among the population (a digital competence offensive with a 2030 target), supporting digital transformation of the economy and research, and integrating digital technologies into climate and sustainability policies.

Key programmatic elements comprise the introduction of a mandatory "Digi-Check" to assess digital-readiness of new legislation, a commitment to interoperability and open standards for federal services, a whole-of-government data strategy to increase data sovereignty and datasharing for public good under privacy safeguards, measures to foster trustworthy and responsible AI deployment including national-level coordination pending EU rules, and strengthened cyber security and cyber defence coordination. Implementation is entrusted to the State Secretary for Digitalisation and Telecommunications as coordinating authority, with responsible federal ministers required to operationalise measures and prioritise budgetary coverage during budget negotiations. The DAA is primarily a policy/strategic instrument (not an individual statute creating private-rights remedies) but sets binding administrative tasks, reporting and coordination expectations within government and links to EU-level regulatory developments. Official primary sources include the Ministerratsvortrag (61/10) and an extensive Beilage (annex) containing the measures and principles. The policy emphasises fundamental-rights protection, data protection compliance (in line with GDPR and Austrian data protection authorities), accessibility, and international alignment with EU initiatives such as the Digital Decade and the forthcoming AI regulatory framework.

Full article

Read full text ↗

Overview

The Digital Austria Act (DAA) is the Austrian federal government’s cross-portfolio digital working programme adopted on 1 June 2023. It consolidates 117 measures and 36 guiding digitalisation principles designed to accelerate the digital transformation of public administration, economy and society while safeguarding data protection, accessibility and fundamental rights. The DAA updates Austria’s earlier strategy instruments (including the 2018 Digital Roadmap) and explicitly links national priorities to the EU Digital Decade. The Cabinet paper and annex that formalised the DAA are published by the Federal Chancellery: see the Ministerratsvortrag and its annex for the full text and measures (Ministerratsvortrag 61/10) and the detailed Beilage listing measures (Beilage to 61/10). The government also published summaries and press material on the Digital Austria portal and in ministerial press releases (Ministry of Finance press release, 1 June 2023).

Definitions

Key terms in the DAA are defined by policy usage rather than by novel statutory definitions. "Digital application/services" denotes public-sector digital offerings, "Smart Government" refers to integrated, user-centred public services with interoperable back-office processes, "Digi-Check" denotes a mandatory digital-feasibility assessment for new legislation, and "datensouveränität" (data sovereignty) denotes a principle that the state and citizens retain maximal control over public and personal data use. The package also adopts broader technology categories (AI, IoT, blockchain, digital twin) and links to GDPR-aligned definitions for personal data and data protection obligations; where legal effect is required, existing law (including EU law) remains the operative legal framework.

Governance and Institutional Framework

DAA implementation is coordinated by the State Secretary for Digitalisation and Telecommunications; the Ministerratsvortrag explicitly assigns the State Secretary the coordination role and instructs responsible ministers to proceed with implementation and budgetary prioritisation. The Federal Chancellery, multiple federal ministries (e.g. Finance, Health, Interior, Education), and agencies such as GovCERT / NCC-AT and the Austrian Data Protection Authority (Datenschutzbehörde) form the operational governance network. The DAA calls for cross-ministerial working groups, regular reporting on progress and prioritisation within the budget process. Official coordination and publication channels are: the Federal Chancellery (Bundeskanzleramt), the Digital Austria portal (Digital Austria), and ministry press offices (e.g. BMF). The DAA also envisages technical steering bodies for standards, interoperability and security and foresees a central role for national cyber-response structures.

Key Focus Areas

The DAA groups measures under multiple strategic priorities: (1) Smart Government — make the Digitales Amt a "Smart Government" platform offering mobile, user-centric, media-break-free services and interoperable registries; (2) Digital Connectivity — ensure nationwide high-performance networks and prepare for 5G/6G; (3) Cyber Security & Cyber Defence — strengthen resilience, GovCERT and coordination with NCC-AT; (4) Digital Transformation of the Economy — promote SME digitalisation, research & innovation and digital infrastructure for production; (5) Digital for Climate — use digital tools to support sustainability goals; (6) Digital Innovation — support pilots, sandboxes and technology uptake (AI, blockchain, digital twins); (7) Digital Health — expand ELGA and digital health services, promote secure health-data practices; (8) Digital Competence — a national competence offensive to raise skills by 2030; (9) Media, Arts & Culture — strengthen quality journalism and digital cultural access; (10) Universities and research — build digital capacities and research infrastructures. Each focus area contains specific measures (the Beilage lists 117 actions) and prescriptive governance steps such as mandatory Digi-Checks for legislative proposals and commitments to open standards and European technology where appropriate (Digital Austria Act overview).

Implementation Framework

Implementation uses a mix of administrative directions, inter-ministerial coordination, budget prioritisation, and operational projects. The Ministerratsvortrag tasks each responsible federal minister to commence immediate steps and to align funding in budget negotiations. The State Secretary is designated as the central coordinator; ministries are required to adopt the 36 core principles (user-centricity, accessibility, security, data sovereignty) and to integrate the Digi-Check in their legislative preparatory work. Operationally, the DAA foresees standard-setting for interoperability (data standards, APIs), expansion of the Digitales Amt platform, pilot projects and sandboxes for AI and other technologies, and targeted investments in ELGA and telemedicine. The DAA also instructs the creation of a whole-of-government data strategy and establishes reporting cycles and milestones to measure progress against EU Digital Decade indicators.

Monitoring and Evaluation

Monitoring is framed around regular progress reporting to the Federal Chancellery and performance indicators mapped to the EU Digital Decade. The Beilage recommends periodic public updates on milestones and outcomes, integration of Digi-Check results in impact assessments, and the establishment of evaluation mechanisms for piloted technologies (including ethical and social impact reviews). Progress will be tracked through formal reports, budgetary follow-ups and technical dashboards; coordination with the EU Digital Decade monitoring ensures comparability and external alignment. Relevant supervisory authorities — notably the Austrian Data Protection Authority — retain oversight where measures implicate privacy or data-protection law.

Penalties, Liability, and Appeals

The DAA itself is a strategic administrative programme rather than a statute creating novel private-law liabilities or criminal sanctions. It sets administrative obligations and expectations for federal bodies (e.g., to perform Digi-Checks, to implement interoperability standards and to ensure accessibility). Consequences for non-compliance are administrative and managerial: missed budget prioritisation, corrective instructions from coordinating authorities, oversight actions, internal audits and public accountability through reporting. Where DAA implementation implicates statutory rights (e.g., data protection breaches, procurement irregularities), existing legal remedies and penalties under applicable laws (including GDPR enforcement by the Austrian Data Protection Authority and public-administration accountability mechanisms) apply.

Relationship to Other Instruments

The DAA builds on and consolidates previous Austrian digital strategies (notably the Digital Roadmap 2018) and interfaces with numerous national legal instruments (data protection law, e-government statutes, sectoral health and administrative law) and EU-level rules. It explicitly prepares Austria for the Digital Decade and anticipates interplay with the EU AI Act, upcoming cybersecurity certification frameworks and the European Data Strategy. The DAA instructs the Digi-Check to be incorporated into the existing impact-assessment workflow and to complement statutory requirements rather than supplant them. The Ministerratsbeilage is the formal administrative basis for the measures and is published alongside the 61/10 Ministerratsvortrag (Beilage).

International Alignment

The DAA explicitly aligns Austria with the EU "Digital Decade" objectives and seeks coherence with EU-level regulatory instruments such as the proposed AI Act, the NIS Directive and upcoming cybersecurity certification schemes. It stresses European technology and open standards for critical services to reduce strategic dependencies and increase digital sovereignty. The Act foregrounds cooperation with EU programmes (e.g., Digital Europe) and articulates the need to implement EU benchmarks for connectivity, digital skills and public-service digitisation. Links to EU initiatives are emphasised on the Digital Austria portal (Digital Austria) and in Cabinet documentation.

Implementation Timeline

MilestoneDescriptionDate / Target
Cabinet adoptionDAA adopted by the Federal Government (Ministerrat)2023-06-01
Publication of measuresBeilage with 117 measures published2023-06-01
Digi-Check rolloutIntegration of Digi-Check into legislative impact assessments2023–2024 (phased)
Digital competence offensiveNational programme targets to upskill population2023–2030
ELGA and digital health upgradesOperational expansion of electronic health services2023–2026 (phased)

Sources and References

SourceType
Ministerratsvortrag 61/10: Digital Austria ActPrimary Source
Beilage to 61/10 (Detailed measures and principles)Primary Source
Digital Austria portal — Digital Austria Act overviewPrimary Source
BMF press release: Digital Austria Act (1 June 2023)Primary Source

Requirements for a company

What an organisation has to do under Austria - Public Sector Digital Transformation, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.

Must do

11
  • Adhere to GDPR and consult the Data Protection Authority when required.All federal bodies processing personal data.
  • Perform a mandatory digital-feasibility assessment for new legislation.Federal ministries drafting new legislation.
  • Ensure the state and citizens retain maximal control over public and personal data use.Federal ministries and agencies handling public and personal data.
  • Ensure all public digital services meet accessibility standards.Providers of public-sector digital services.
  • Align with national cybersecurity structures like GovCERT and NCC-AT.Federal bodies operating digital systems.
  • Adopt open standards and APIs for digital services and data exchange.Federal bodies developing or procuring digital services.
  • +5 more in the table below

Must not do

0

Nothing in this category.

Should do

1
  • Support pilot projects and sandboxes for AI and other technologies.Federal bodies responsible for digital innovation.

Should not do

0

Nothing in this category.

Who must do what

The obligations under Austria - Public Sector Digital Transformation, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1All federal bodies processing personal data.Adhere to GDPR and consult the Data Protection Authority when required.
“safeguarding data protection, accessibility and fundamental rights.”
—Overview, Definitions, Compliance ChecklistCritical
2Federal ministries drafting new legislation.Perform a mandatory digital-feasibility assessment for new legislation.
“Digi-Check denotes a mandatory digital-feasibility assessment for new legislation.”
2023-2024 (phased)Definitions, Implementation Framework, Key Focus AreasImportant
3Federal ministries and agencies handling public and personal data.Ensure the state and citizens retain maximal control over public and personal data use.
“datensouveränität (data sovereignty) denotes a principle that the state and citizens retain maximal control over public and personal data use.”
—Definitions, Implementation FrameworkImportant
4Providers of public-sector digital services.Ensure all public digital services meet accessibility standards.
“Ensure public services meet accessibility standards.”
—Overview, Compliance ChecklistImportant
5Federal bodies operating digital systems.Align with national cybersecurity structures like GovCERT and NCC-AT.
“Align with national cyber structures (GovCERT/NCC-AT).”
—Key Focus Areas, Compliance ChecklistImportant
6Federal bodies developing or procuring digital services.Adopt open standards and APIs for digital services and data exchange.
“Adopt open standards and APIs.”
—Key Focus Areas, Implementation Framework, Compliance ChecklistImportant
7Federal bodies piloting AI and other new technologies.Establish evaluation mechanisms for piloted technologies, including ethical and social impact reviews.
“establish evaluation mechanisms for piloted technologies (including ethical and social impact reviews).”
—Monitoring and EvaluationImportant
8Federal ministries.Adopt the 36 core principles, including user-centricity, accessibility, security, and data sovereignty.
“ministries are required to adopt the 36 core principles (user-centricity, accessibility, security, data sovereignty)”
—Implementation FrameworkImportant
9Responsible federal ministers and ministries.Report regularly on implementation progress to the Federal Chancellery.
“regular progress reporting to the Federal Chancellery”
—Governance and Institutional Framework, Monitoring and EvaluationImportant
10Responsible federal ministers.Prioritize funding for DAA measures in budget negotiations.
“instructs responsible ministers to proceed with implementation and budgetary prioritisation.”
—Governance and Institutional Framework, Implementation FrameworkImportant
11Federal government (coordinated by State Secretary).Create a whole-of-government data strategy.
“The DAA also instructs the creation of a whole-of-government data strategy”
—Implementation FrameworkImportant
12Federal bodies responsible for digital innovation.Support pilot projects and sandboxes for AI and other technologies.
“support pilots, sandboxes and technology uptake (AI, blockchain, digital twins)”
—Key Focus Areas, Implementation FrameworkRecommended

© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 10 Sep 2026