Regulatory Watch  /  Italy  /  Enforcement
Low impactEnforcementFiled

noyb files GDPR complaint against Microsoft’s Xandr for 0% compliance with data subject rights

Xandr, a Microsoft subsidiary, collects and shares personal data of millions of Europeans for targeted advertising, including sensitive categories. noyb filed a GDPR complaint with Italy’s Garante alleging breaches of Articles 5, 12, 15 and 17 and a 0% response rate to access and erasure requests. The complaint seeks an investigation and a possible fine of up to 4% of Xandr’s annual turnover.

Why it matters: The complaint highlights a large‑scale alleged violation of GDPR data‑subject rights affecting millions of EU users.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Microsoft's Xandr grants GDPR rights at a rate of 0%
noyb · primary source · Jul 9, 2024
Microsoft's Xandr grants GDPR rights at a rate of 0%
noyb · Jul 9, 2024
Details
JurisdictionItaly
RegulatorItalian data protection authority (Garante)
LawGeneral Data Protection Regulation
StatusFiled
PublishedJuly 9, 2024
Effectivenot stated
OrganisationsXandr, Microsoft, emetriq
Topicstransparency, data minimization, access, deletion, targeted advertising, profiling, privacy, data brokers
Datapersonal, sensitive