Regulatory Watch  /  European Union  /  Enforcement
Moderate impactEnforcementAnnounced

noyb warns of widespread GDPR non‑compliance and lack of enforcement after four years

The NGO noyb states that despite the GDPR becoming applicable on 25 May 2018, many companies continue to ignore users' rights and enforcement remains weak. It notes that about 50 cross‑country cases it filed have not yet received a final decision.

Why it matters: The statement highlights persistent GDPR non‑compliance and limited enforcement, signalling ongoing risks for data subjects and regulators.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Statement on 4 Years of GDPR
noyb · primary source · May 24, 2022
Statement on 4 Years of GDPR
noyb · May 24, 2022
Details
JurisdictionEuropean Union
RegulatorEDPB
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedMay 24, 2022
Effectivenot stated
Organisationsnoyb, data protection authorities
Topicsprivacy, data governance, consent, access, deletion, correction, security
Datapersonal, sensitive