Legal position · Austria

Agent mandates under Austrian law

Austria governs authorisation in the ABGB (§§ 1002 ff.): the contract of authorisation combines instruction and authority, the scope is determined by the nature of the transaction (§ 1029 ABGB), and revocation is permitted at any time. For agents this means: a generic authority with clear limits is the natural frame — and ID Austria already provides a state identity basis today.

Legal foundations

Contract of authorisation (§§ 1002 ff. ABGB)

Whoever undertakes to conduct a transaction in another's name acts within the power granted. The mandate is the machine-readable form of this contract: instruction (scope), limits (constraints) and term in one verifiable artefact.

Scope of authority (§ 1029 ABGB)

Authority for a transaction covers what the nature of the transaction requires. The action taxonomy and templates specify this nature per type of business — the dispute over implied scope gives way to an explicit limit.

Generic vs. specific authority (§ 1008 ABGB)

Certain types of transaction require special authority covering that category. OMP wildcards mirror this: scope extensions only at category level (such as subscription.cancel.*), never globally — the statutory gradation as a schema rule.

Revocation and expiry (§§ 1020 ff. ABGB)

The principal can revoke the authority at any time. The kill switch executes § 1020 in real time; expiry becomes visible to every verifier immediately via the status endpoint.

Evidence in a dispute

Austria also applies the free assessment of evidence (§ 272 ZPO); eIDAS applies directly, and qualified timestamps carry the Art. 41 presumption. The hash-chained evidence — with qualified root anchoring once a trust service is connected — at the same time meets the documentation expectations of administrative practice, relevant for actions towards authorities such as permit.apply.

Identity root

With ID Austria, Austria already has an established state E-ID; EUDI wallet integration follows the EU timetable. The identity anchor (ident_anchor: eudi) is prepared; the organisational anchor remains the company register number.

The reach of ID Austria makes the market the natural second launch after Switzerland: state identity exists, the mandate layer is missing — exactly the gap Mandact fills.

Legal position by action type (Austria)

Purchase goods Execute bank transfer Grant direct debit mandate Open account Override sanctions screening Submit tax return Disclose personal data Transfer data to a third country Notify authority of data breach Notify data subjects of breach Execute erasure request Export data for portability Process withdrawal of consent Activate automated decision-making Submit filing to authority File appeal Apply for permit Submit customs declaration Report to social insurance File with commercial register Submit procurement bid Grant authority inspection Trigger bulk send Publish ad hoc disclosure Enter into contract Waive a deadline Settle dispute Disclose patient data Issue prescription Hire employee Change salary Correct working time record Report occupational accident Issue employment reference Ship dangerous goods Trigger product recall Shed grid load Report security incident (critical infrastructure)Override safety system Bind insurance policy Deny insurance claim Cancel insurance policy Issue certificate Decide on enrolment Apply for mortgage Initiate legal proceedings Grant power of attorney Terminate employment Enter into surety Purchase real property Fulfil data subject request Enter into lease File Firmenbuch change (AT company register)Respond to data subject access request Enter into works agreement Register a trade (Gewerbeanmeldung)File WKO notification (AT chamber of commerce)

Not legal advice. These pages explain the legal position in general terms; responsibility for the limits set lies with the person granting the mandate.