The Viennese Superior Court ruled that Facebook must pay Mr. Schrems €500 in emotional damages and provide him full access to all personal data the company holds about him. The court held that Facebook does not need user consent under GDPR Article 6(1)(a) because it can rely on a contract under Article 6(1)(b). The decision also confirms users' right to know which third parties have supplied data to or received data from Facebook.
Why it matters: The ruling challenges Facebook's use of contract terms to bypass GDPR consent requirements, reinforcing users' access and transparency rights.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
