Moderate
Court ruling
Decided
Ireland · Jul 6, 2020
Irish High Court grants leave for judicial review of DPC's slow GDPR complaint procedure
The Irish High Court granted leave to noyb.eu to challenge the Data Protection Commission's handling of GDPR complaints against WhatsApp and Instagram. The DPC has taken two years to produce a first draft inquiry report, the first step of…
Irish Data Protection Commission · General Data Protection Regulation
Moderate
Court ruling
Decided
Austria · Jun 30, 2020
Vienna Regional Court issues limited judgment in Schrems v. Facebook case
The Vienna Regional Court delivered a written judgment that largely summarised the facts and granted the plaintiff full access to his data and €500 symbolic damages. The judge limited legal analysis of GDPR compliance to 19 sentences and…
EDPB · General Data Protection Regulation
Moderate
Interpretation
Published
European Union · Jun 24, 2020
EDPB responds to noyb open letter on Facebook case procedural concerns
The European Data Protection Board acknowledged the issues raised by noyb regarding the Irish DPA's handling of the Facebook case and said it is working to improve consistency procedures and cooperation among supervisory authorities. No…
European Data Protection Board · General Data Protection Regulation
Moderate
Fine
In effect
France · Jun 19, 2020
French court upholds €50 million CNIL fine against Google
The French Data Protection Authority (CNIL) imposed a €50 million fine on Google for insufficient information and lack of valid consent for personalized ads. The Conseil d’État confirmed the CNIL's decision and affirmed its jurisdiction…
CNIL · General Data Protection Regulation
Moderate
Enforcement
Filed
Austria · May 13, 2020
noyb files GDPR complaint against Google over Android Advertising ID tracking
noyb filed a formal GDPR complaint against Google for tracking users via the Android Advertising ID without a valid legal basis. The complaint was submitted on behalf of an Austrian citizen to the Austrian Data Protection Authority. GDPR…
Austrian Data Protection Authority · General Data Protection Regulation
Moderate
Guidance
Published
European Union · Apr 9, 2020
noyb releases ad‑hoc guidance on GDPR compliance for COVID‑19 data processing
noyb published an ad‑hoc paper outlining how the GDPR permits processing personal data to combat the coronavirus pandemic. The paper cites Articles 6(1)(d) and 9(2)(i) as legal bases and stresses the need for privacy‑by‑design, data…
EDPB · General Data Protection Regulation
Moderate
Guidance
Published
European Union · Apr 2, 2020
Noyb reports video conferencing tools' privacy policies fall short of GDPR obligations
The report examined the privacy policies of six video‑conferencing services (Zoom, Webex Meetings, Meeting, Skype, Teams, Wire) and found they lack clear GDPR information, such as basic rights and recipient details. An update on…
EDPB · General Data Protection Regulation
Moderate
Court ruling
Pending
Austria · Feb 26, 2020
Vienna Regional Court closes oral hearing in GDPR case against Facebook, judgment pending
The Vienna Regional Court for Civil Matters (LGfZRS) ended a nine‑hour oral hearing in a data‑protection lawsuit against Facebook. The court will issue a written judgment in the coming months and the case is expected to be appealed to…
EDPB · General Data Protection Regulation
Moderate
Interpretation
Published
European Union · Feb 26, 2020 · effective Feb 26, 2020
GDPRhub launches public wiki summarizing national GDPR decisions
A new public wiki, GDPRhub, provides searchable summaries of GDPR decisions by national DPAs and courts in English. The site aims to collect over 500 decisions by the end of 2020 and includes commentaries, DPA profiles, and jurisdictional…
EDPB · General Data Protection Regulation
Moderate
Fine
Announced
France · Jun 21, 2019
CNIL fines Google €50 million for GDPR ‘forced consent’ violations
The French data protection authority (CNIL) announced a €50 million fine against Google for GDPR violations related to forced consent. The penalty stems from complaints filed by noyb.eu and La Quadrature du Net. The announcement was made…
CNIL · General Data Protection Regulation
Moderate
Guidance
Announced
European Union · Jun 5, 2019
noyb and Access Now host workshop on GDPR enforcement actions in Vienna
The workshop “One year after GDPR: Advancing rights through effective enforcement actions” was held May 8‑10, 2019 in Vienna. It gathered NGOs, public authorities and researchers to discuss practical aspects of GDPR enforcement, noting…
EDPB · General Data Protection Regulation
Moderate
Interpretation
Published
European Union · Dec 8, 2018
Noyb reports controllers limit GDPR rights to specific request formats
Noyb notes that many data controllers use automated systems that restrict how data subjects can exercise their GDPR rights, often limiting requests to specific formats that may not serve the data subject's interests. The organization…
EDPB · General Data Protection Regulation
Moderate
Interpretation
Published
European Union · Nov 12, 2018
Max Schrems discusses GDPR on CBS 60 Minutes (Nov 11, 2018)
On 11 November 2018, noyb director Max Schrems appeared on CBS's 60 Minutes to explain the benefits and challenges of the GDPR and how the organization enforces it. The interview highlighted the law's role in allowing Europeans to reclaim…
EDPB · General Data Protection Regulation
Moderate
Enforcement
Filed
European Union · May 25, 2018 · effective May 25, 2018
noyb files GDPR complaints against Google, Instagram, WhatsApp and Facebook for forced consent
On 25 May 2018, the privacy NGO noyb filed four complaints with DPAs in France, Belgium, Germany and Austria alleging that Google, Instagram, WhatsApp and Facebook use forced consent that violates GDPR Article 7(4). The complaints argue…
EDPB · General Data Protection Regulation
