Regulatory Watch  /  European Union  /  Enforcement
Moderate impactEnforcementFiled

noyb files complaints against Fitbit in Austria, Netherlands, Italy over forced consent for data transfers

noyb lodged three complaints with the Austrian, Dutch and Italian data protection authorities alleging that Fitbit forces new EU users to consent to transfers of personal and health data to the United States and other countries. The complaints state that users cannot withdraw consent except by deleting their accounts, violating GDPR requirements for free, informed and specific consent. noyb requests the DPAs to compel Fitbit to provide full information on transfers and to allow use of the app without forced consent.

Why it matters: The complaints allege that Fitbit's forced consent model breaches GDPR, potentially exposing the company to multibillion‑euro fines.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Your Fitbit is useless – unless you consent to unlawful data sharing
noyb · primary source · Aug 31, 2023
Your Fitbit is useless – unless you consent to unlawful data sharing
noyb · Aug 31, 2023
Details
JurisdictionEuropean Union
RegulatorAustrian Data Protection Authority, Dutch Data Protection Authority, Italian Data Protection Authority
LawGeneral Data Protection Regulation
StatusFiled
PublishedAugust 31, 2023
Effectivenot stated
OrganisationsFitbit, Google
Topicsconsent, cross border transfer, health, data minimization, privacy
Datapersonal, sensitive, health