Is AI Cold Calling Legal in Austria? B2B, GDPR and TKG Rules

Most teams assume B2B cold calling in Europe runs on GDPR legitimate interest. In Austria, that assumption breaks on the first call. The country's telecom law bans advertising calls made without the person's prior consent, and the text doesn't carve out business numbers. So AI cold calling in Austria works only when the person on the other end has agreed to be called.

This guide walks through the rule, the fine, the GDPR layer on top, and a setup that holds up if a regulator or a competitor asks questions. It's general information, not legal advice.

Key Takeaways

• Section 174(1) of the Austrian TKG 2021 makes advertising calls without the user's prior consent unlawful, and the text names no exception for B2B.
• A violation can be punished with an administrative fine of up to EUR 100,000 under section 188(6) of the same law.
• GDPR runs in parallel: fines reach EUR 20 million or 4% of worldwide annual turnover under Article 83(5).
• Suppressing or faking your caller ID on an advertising call is a separate breach under section 174(2).

• Topcalls AI calls start from $0.25/min, and Topcalls does not keep a do-not-call list, so consent records stay with you.

1. Is AI voice agent cold calling legal for B2B in Austria under GDPR?

An AI voice agent can lawfully make a sales call in Austria only if the person called gave prior consent. Section 174(1) TKG 2021 applies to every advertising call, and the law makes no distinction between a consumer and a company. GDPR legitimate interest can support the data processing, but it doesn't replace the consent the telecom law asks for.

Here's the sentence that matters, straight from the Austrian legal information system:

Anrufe, so der Gesetzestext, "zu Werbezwecken ohne vorherige Einwilligung des Nutzers sind unzulässig." (Section 174(1) TKG 2021, Rechtsinformationssystem des Bundes)

In plain English: calls for advertising purposes without the user's prior consent are not allowed. The word "Anrufe" covers any call. The law doesn't ask whether a human or a machine does the talking, so a conversational AI agent falls under the same rule as a sales rep with a phone.

Two details help in practice. Consent from a person the line holder authorized to use the line counts the same as the line holder's own consent. And consent can be withdrawn at any time, which means your system has to stop calling the moment someone says no.

2. What does section 174 TKG actually require?

Section 174 TKG 2021 requires three things for advertising calls: prior consent from the user, a caller ID that isn't suppressed or falsified, and respect for withdrawn consent. Each one is a separate duty. You can break the second even when the first is fine, so check all three before a campaign goes live.

Table: Austrian rules for advertising calls at a glance

The caller ID rule matters more for AI calling than people expect. If a campaign rotates through numbers, every number has to display properly and lead back to your company. A masked line is a violation on its own, even if you hold consent for every contact.

3. How does GDPR fit on top of the Austrian rule?

GDPR applies on top of section 174 because a phone number and a name are personal data. You need a legal basis for processing them, you must tell people how their data is used, and you must stop processing for direct marketing when someone objects. The telecom law decides whether the call may happen at all. GDPR governs what you do with the data.

Article 21(2) and (3) GDPR give every person the right to object to direct marketing at any time, and once they do, you can't keep processing their data for that purpose. Under Article 83(5), breaches of data subject rights can cost up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher.

So there are two layers. Layer one is the TKG: no consent, no call. Layer two is GDPR: a documented legal basis, a privacy notice, and a working opt-out. For a wider view of how GDPR treats outbound calling across countries, see our guide to AI cold calling under GDPR.

4. Does an AI call have to say it's an AI?

An AI call should open by saying it's an automated assistant calling on behalf of your company. Section 174 doesn't contain an AI disclosure line. But the EU AI Act's Article 50(1) requires systems that talk to people to make clear they're AI unless that's obvious from the context.

Read it as a design rule for your script. Say who is calling, say the reason in one sentence, and say it's an automated assistant. Our AI disclosure laws guide tracks how that obligation looks across jurisdictions and what timing applies.

A plain opening also helps you commercially. People who hear the truth in the first ten seconds hang up less angrily, and they're less likely to file a complaint afterwards.

5. How do you get consent that holds up?

Good consent for an Austrian B2B call is specific, recorded and reachable on demand. Collect it through a form, a meeting request, an inbound inquiry or a signed agreement that names phone contact. Then store when it was given, how, and what the person agreed to, so you can prove it later.

Practical sources of consent that fit AI follow-up calls:

• Inbound requests: a prospect fills in a demo form that says a person or an automated assistant will call back.
• Event opt-ins: a visitor ticks a phone-contact box when registering for a webinar or trade fair.
• Customer agreements: existing customers agree to phone contact in the contract or onboarding flow.
• Double-checked lists: purchased lists only work if the seller can prove consent for your use. Ask for the proof in writing.

Calling hours aren't set by section 174. The tests are consent and caller ID. Even so, set a sensible window per campaign, because calls at 7 a.m. or 9 p.m. generate the complaints that start investigations.

Want to see what a consented campaign costs at your volume? Run your numbers through the Topcalls ROI calculator.

6. What about do-not-call lists in Austria?

Austria doesn't give you a phone-call registry to screen against instead of collecting consent. The list in section 7(2) of the E-Commerce-Gesetz, which section 174(4) TKG refers to, concerns electronic mail, not calls. For phone calls, the consent rule does the work: no consent, no call.

That makes your own suppression list the most important list you have. Every opt-out, every "please stop calling" and every withdrawn consent goes on it, and it gets checked before every dial. Topcalls doesn't keep a do-not-call list for you. You remove those contacts from the lead file before upload, and you stay responsible for consent and opt-outs.

7. How do you set up a compliant AI calling campaign in Austria?

A compliant setup has five parts: consented leads only, an honest opening, a visible caller ID, controlled dispatch hours and a record of each call. Topcalls handles the dialing side with AI voice agents and campaign settings. You bring the consent data and the opt-out handling.

1. Load only contacts with documented consent for phone contact.
2. Write the opening so it names your company, the reason and the automated assistant.
3. Use numbers you own, verified and displayed, never masked.
4. Set dispatch hours and weekdays per campaign, in the campaign's time zone.
5. Keep recordings and transcripts so you can show what was said.
6. Remove anyone who opts out before the next dial.

Topcalls AI calls start from $0.25/min depending on the country called, billed by the second, and a first campaign typically goes live in about 2 weeks. If your list is warm, the same setup powers lead qualification calls that route interested prospects to your team.

8. When does AI cold calling not fit Austria?

AI calling is the wrong tool when you can't show consent. A list scraped from websites, a purchased database without proof, or a trade-fair badge scan with no phone permission all fail the test. No script or setting fixes missing consent, and an AI agent only makes more of those calls per hour.

It also fits poorly where every conversation needs a senior person, such as complex enterprise deals. There, use AI to confirm interest from consented leads and book the meeting, and let your people handle the sale.

For rules in nearby markets, see the UK PECR guide and the US TCPA rules for cold calling. Each country sets the line in a different place.

Sources

The rules above come from the primary texts: section 174 TKG 2021 and the penalty provisions in the consolidated TKG 2021 at ris.bka.gv.at, the GDPR and the EU AI Act. Laws change and courts read them, so check the current text with an Austrian lawyer before you launch. This page is general information, not legal advice.

Ready to plan a consent-based campaign? Book a strategy call and we'll map your list and opening script before the first dial.