Access Requests / Policy Review

noyb has conducted a thorough review of privacy policies of eight streaming service providers and included its observations in a report submitted to the Austrian Chamber for Workers and Employees (Kammer für Arbeiter und Angestellte, AK) in October 2019. The purpose of the review was to investigate how major actors in the streaming industry comply with certain principles of GDPR. The investigation focused on two areas of compliance: (1) the duty to provide proper information – usually in a so-called “privacy policy” (Article 13 and 14 of the GDPR), and (2) compliance with the right of users to access their data (Article 15 of the GDPR).

The companies investigated were: Amazon Prime (music and video), Apple Music (music), DAZN (video), Flimmit (video), Netflix (video), SoundCloud (music), Spotify (music), and YouTube (video). The report was published in German here.

Relevant articles