Everyone has personal details (name, age, birthday, medical history, preferences, religious confession, etc.). Many types of personal data are stored with employers, government offices, etc. According to the law, these personal details must be protected, because they have nothing to do with third parties. This protection is governed by the Data Protection Act and the General Data Protection Regulation. The act and the directive define, for example, when it is permissible for personal data to be collected, how it needs to be protected, and when it must be deleted.

The private sphere describes a person's family/domestic domain (a person's living circumstances, what they write in private emails/messages, who their loved ones are, etc.). In this field, the person in question has the right to be themselves without being restricted/bothered by external influences (government, employer, etc.). However, people must still abide by laws in their private life.

In Austria, a law on the security of network and information systems has been enacted. It defines requirements to be met by the providers of essential services in the fields of energy, transport, banking, financial market infrastructure, health care, drinking water supply, and digital infrastructure. Fill is not directly affected by this law.