Austria - Public Sector Digital Transformation
Digital Austria Act
Digital Austria Act (Digital Austria Act / Digitales Arbeitsprogramm der Bundesregierung)
Austria
RAI-AT-NA-DADADXX-2023Austria - Public Sector Digital Transformation is Adopted in Austria as of 10 Sep 2026, according to bundeskanzleramt.gv.at.
PolicyGovernance and OversightData Protection and PrivacyCybersecurity and Model SecurityThe Digital Austria Act (DAA) is the Austrian federal government's cross-portfolio digital working programme adopted by the Cabinet on 1 June 2023. It bundles 117 measures and 36 guiding principles to accelerate digital transformation across public administration, healthcare, infrastructure, skills and innovation while protecting data protection, accessibility and fundamental rights.
Summary
The Digital Austria Act (DAA), presented to and adopted by the Austrian Federal Government on 1 June 2023, is a strategic, cross-ministerial policy package that consolidates 117 concrete measures and 36 digitalisation principles to guide Austria’s public-sector digital transformation. The DAA updates earlier strategies such as the 2018 Digital Roadmap and aligns Austria’s national activities with the EU Digital Decade objectives. Core aims include modernising public administration through a "Smart Government" approach, enhancing digital connectivity and cyber resilience, expanding digital health services (including the electronic health record ELGA), strengthening digital skills among the population (a digital competence offensive with a 2030 target), supporting digital transformation of the economy and research, and integrating digital technologies into climate and sustainability policies.
Key programmatic elements comprise the introduction of a mandatory "Digi-Check" to assess digital-readiness of new legislation, a commitment to interoperability and open standards for federal services, a whole-of-government data strategy to increase data sovereignty and datasharing for public good under privacy safeguards, measures to foster trustworthy and responsible AI deployment including national-level coordination pending EU rules, and strengthened cyber security and cyber defence coordination. Implementation is entrusted to the State Secretary for Digitalisation and Telecommunications as coordinating authority, with responsible federal ministers required to operationalise measures and prioritise budgetary coverage during budget negotiations. The DAA is primarily a policy/strategic instrument (not an individual statute creating private-rights remedies) but sets binding administrative tasks, reporting and coordination expectations within government and links to EU-level regulatory developments. Official primary sources include the Ministerratsvortrag (61/10) and an extensive Beilage (annex) containing the measures and principles. The policy emphasises fundamental-rights protection, data protection compliance (in line with GDPR and Austrian data protection authorities), accessibility, and international alignment with EU initiatives such as the Digital Decade and the forthcoming AI regulatory framework.
Full article
Read full text ↗Overview
The Digital Austria Act (DAA) is the Austrian federal government’s cross-portfolio digital working programme adopted on 1 June 2023. It consolidates 117 measures and 36 guiding digitalisation principles designed to accelerate the digital transformation of public administration, economy and society while safeguarding data protection, accessibility and fundamental rights. The DAA updates Austria’s earlier strategy instruments (including the 2018 Digital Roadmap) and explicitly links national priorities to the EU Digital Decade. The Cabinet paper and annex that formalised the DAA are published by the Federal Chancellery: see the Ministerratsvortrag and its annex for the full text and measures (Ministerratsvortrag 61/10) and the detailed Beilage listing measures (Beilage to 61/10). The government also published summaries and press material on the Digital Austria portal and in ministerial press releases (Ministry of Finance press release, 1 June 2023).
Definitions
Key terms in the DAA are defined by policy usage rather than by novel statutory definitions. "Digital application/services" denotes public-sector digital offerings, "Smart Government" refers to integrated, user-centred public services with interoperable back-office processes, "Digi-Check" denotes a mandatory digital-feasibility assessment for new legislation, and "datensouveränität" (data sovereignty) denotes a principle that the state and citizens retain maximal control over public and personal data use. The package also adopts broader technology categories (AI, IoT, blockchain, digital twin) and links to GDPR-aligned definitions for personal data and data protection obligations; where legal effect is required, existing law (including EU law) remains the operative legal framework.
Governance and Institutional Framework
DAA implementation is coordinated by the State Secretary for Digitalisation and Telecommunications; the Ministerratsvortrag explicitly assigns the State Secretary the coordination role and instructs responsible ministers to proceed with implementation and budgetary prioritisation. The Federal Chancellery, multiple federal ministries (e.g. Finance, Health, Interior, Education), and agencies such as GovCERT / NCC-AT and the Austrian Data Protection Authority (Datenschutzbehörde) form the operational governance network. The DAA calls for cross-ministerial working groups, regular reporting on progress and prioritisation within the budget process. Official coordination and publication channels are: the Federal Chancellery (Bundeskanzleramt), the Digital Austria portal (Digital Austria), and ministry press offices (e.g. BMF). The DAA also envisages technical steering bodies for standards, interoperability and security and foresees a central role for national cyber-response structures.
Key Focus Areas
The DAA groups measures under multiple strategic priorities: (1) Smart Government — make the Digitales Amt a "Smart Government" platform offering mobile, user-centric, media-break-free services and interoperable registries; (2) Digital Connectivity — ensure nationwide high-performance networks and prepare for 5G/6G; (3) Cyber Security & Cyber Defence — strengthen resilience, GovCERT and coordination with NCC-AT; (4) Digital Transformation of the Economy — promote SME digitalisation, research & innovation and digital infrastructure for production; (5) Digital for Climate — use digital tools to support sustainability goals; (6) Digital Innovation — support pilots, sandboxes and technology uptake (AI, blockchain, digital twins); (7) Digital Health — expand ELGA and digital health services, promote secure health-data practices; (8) Digital Competence — a national competence offensive to raise skills by 2030; (9) Media, Arts & Culture — strengthen quality journalism and digital cultural access; (10) Universities and research — build digital capacities and research infrastructures. Each focus area contains specific measures (the Beilage lists 117 actions) and prescriptive governance steps such as mandatory Digi-Checks for legislative proposals and commitments to open standards and European technology where appropriate (Digital Austria Act overview).
Implementation Framework
Implementation uses a mix of administrative directions, inter-ministerial coordination, budget prioritisation, and operational projects. The Ministerratsvortrag tasks each responsible federal minister to commence immediate steps and to align funding in budget negotiations. The State Secretary is designated as the central coordinator; ministries are required to adopt the 36 core principles (user-centricity, accessibility, security, data sovereignty) and to integrate the Digi-Check in their legislative preparatory work. Operationally, the DAA foresees standard-setting for interoperability (data standards, APIs), expansion of the Digitales Amt platform, pilot projects and sandboxes for AI and other technologies, and targeted investments in ELGA and telemedicine. The DAA also instructs the creation of a whole-of-government data strategy and establishes reporting cycles and milestones to measure progress against EU Digital Decade indicators.
Monitoring and Evaluation
Monitoring is framed around regular progress reporting to the Federal Chancellery and performance indicators mapped to the EU Digital Decade. The Beilage recommends periodic public updates on milestones and outcomes, integration of Digi-Check results in impact assessments, and the establishment of evaluation mechanisms for piloted technologies (including ethical and social impact reviews). Progress will be tracked through formal reports, budgetary follow-ups and technical dashboards; coordination with the EU Digital Decade monitoring ensures comparability and external alignment. Relevant supervisory authorities — notably the Austrian Data Protection Authority — retain oversight where measures implicate privacy or data-protection law.
Penalties, Liability, and Appeals
The DAA itself is a strategic administrative programme rather than a statute creating novel private-law liabilities or criminal sanctions. It sets administrative obligations and expectations for federal bodies (e.g., to perform Digi-Checks, to implement interoperability standards and to ensure accessibility). Consequences for non-compliance are administrative and managerial: missed budget prioritisation, corrective instructions from coordinating authorities, oversight actions, internal audits and public accountability through reporting. Where DAA implementation implicates statutory rights (e.g., data protection breaches, procurement irregularities), existing legal remedies and penalties under applicable laws (including GDPR enforcement by the Austrian Data Protection Authority and public-administration accountability mechanisms) apply.
Relationship to Other Instruments
The DAA builds on and consolidates previous Austrian digital strategies (notably the Digital Roadmap 2018) and interfaces with numerous national legal instruments (data protection law, e-government statutes, sectoral health and administrative law) and EU-level rules. It explicitly prepares Austria for the Digital Decade and anticipates interplay with the EU AI Act, upcoming cybersecurity certification frameworks and the European Data Strategy. The DAA instructs the Digi-Check to be incorporated into the existing impact-assessment workflow and to complement statutory requirements rather than supplant them. The Ministerratsbeilage is the formal administrative basis for the measures and is published alongside the 61/10 Ministerratsvortrag (Beilage).
International Alignment
The DAA explicitly aligns Austria with the EU "Digital Decade" objectives and seeks coherence with EU-level regulatory instruments such as the proposed AI Act, the NIS Directive and upcoming cybersecurity certification schemes. It stresses European technology and open standards for critical services to reduce strategic dependencies and increase digital sovereignty. The Act foregrounds cooperation with EU programmes (e.g., Digital Europe) and articulates the need to implement EU benchmarks for connectivity, digital skills and public-service digitisation. Links to EU initiatives are emphasised on the Digital Austria portal (Digital Austria) and in Cabinet documentation.
Implementation Timeline
| Milestone | Description | Date / Target |
|---|---|---|
| Cabinet adoption | DAA adopted by the Federal Government (Ministerrat) | 2023-06-01 |
| Publication of measures | Beilage with 117 measures published | 2023-06-01 |
| Digi-Check rollout | Integration of Digi-Check into legislative impact assessments | 2023–2024 (phased) |
| Digital competence offensive | National programme targets to upskill population | 2023–2030 |
| ELGA and digital health upgrades | Operational expansion of electronic health services | 2023–2026 (phased) |
Sources and References
| Source | Type |
|---|---|
| Ministerratsvortrag 61/10: Digital Austria Act | Primary Source |
| Beilage to 61/10 (Detailed measures and principles) | Primary Source |
| Digital Austria portal — Digital Austria Act overview | Primary Source |
| BMF press release: Digital Austria Act (1 June 2023) | Primary Source |
Requirements for a company
What an organisation has to do under Austria - Public Sector Digital Transformation, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Adopted). These requirements apply once the instrument takes effect and may change before then.
Must do
11- Adhere to GDPR and consult the Data Protection Authority when required.All federal bodies processing personal data.
- Perform a mandatory digital-feasibility assessment for new legislation.Federal ministries drafting new legislation.
- Ensure the state and citizens retain maximal control over public and personal data use.Federal ministries and agencies handling public and personal data.
- Ensure all public digital services meet accessibility standards.Providers of public-sector digital services.
- Align with national cybersecurity structures like GovCERT and NCC-AT.Federal bodies operating digital systems.
- Adopt open standards and APIs for digital services and data exchange.Federal bodies developing or procuring digital services.
- +5 more in the table below
Must not do
0Nothing in this category.
Should do
1- Support pilot projects and sandboxes for AI and other technologies.Federal bodies responsible for digital innovation.
Should not do
0Nothing in this category.
Who must do what
The obligations under Austria - Public Sector Digital Transformation, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | All federal bodies processing personal data. | Adhere to GDPR and consult the Data Protection Authority when required. “safeguarding data protection, accessibility and fundamental rights.” | — | Overview, Definitions, Compliance Checklist | Critical |
| 2 | Federal ministries drafting new legislation. | Perform a mandatory digital-feasibility assessment for new legislation. “Digi-Check denotes a mandatory digital-feasibility assessment for new legislation.” | 2023-2024 (phased) | Definitions, Implementation Framework, Key Focus Areas | Important |
| 3 | Federal ministries and agencies handling public and personal data. | Ensure the state and citizens retain maximal control over public and personal data use. “datensouveränität (data sovereignty) denotes a principle that the state and citizens retain maximal control over public and personal data use.” | — | Definitions, Implementation Framework | Important |
| 4 | Providers of public-sector digital services. | Ensure all public digital services meet accessibility standards. “Ensure public services meet accessibility standards.” | — | Overview, Compliance Checklist | Important |
| 5 | Federal bodies operating digital systems. | Align with national cybersecurity structures like GovCERT and NCC-AT. “Align with national cyber structures (GovCERT/NCC-AT).” | — | Key Focus Areas, Compliance Checklist | Important |
| 6 | Federal bodies developing or procuring digital services. | Adopt open standards and APIs for digital services and data exchange. “Adopt open standards and APIs.” | — | Key Focus Areas, Implementation Framework, Compliance Checklist | Important |
| 7 | Federal bodies piloting AI and other new technologies. | Establish evaluation mechanisms for piloted technologies, including ethical and social impact reviews. “establish evaluation mechanisms for piloted technologies (including ethical and social impact reviews).” | — | Monitoring and Evaluation | Important |
| 8 | Federal ministries. | Adopt the 36 core principles, including user-centricity, accessibility, security, and data sovereignty. “ministries are required to adopt the 36 core principles (user-centricity, accessibility, security, data sovereignty)” | — | Implementation Framework | Important |
| 9 | Responsible federal ministers and ministries. | Report regularly on implementation progress to the Federal Chancellery. “regular progress reporting to the Federal Chancellery” | — | Governance and Institutional Framework, Monitoring and Evaluation | Important |
| 10 | Responsible federal ministers. | Prioritize funding for DAA measures in budget negotiations. “instructs responsible ministers to proceed with implementation and budgetary prioritisation.” | — | Governance and Institutional Framework, Implementation Framework | Important |
| 11 | Federal government (coordinated by State Secretary). | Create a whole-of-government data strategy. “The DAA also instructs the creation of a whole-of-government data strategy” | — | Implementation Framework | Important |
| 12 | Federal bodies responsible for digital innovation. | Support pilot projects and sandboxes for AI and other technologies. “support pilots, sandboxes and technology uptake (AI, blockchain, digital twins)” | — | Key Focus Areas, Implementation Framework | Recommended |
Related Regulations
More AI regulation in Austria
© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 10 Sep 2026