noyb got operational on May 25th 2018. We are currently starting with the first projects, of which many are researching enforcement options. Below you can find a list of projects we are currently working on. Some are work in progress, so we cannot tell the public too much about them - yet...
Current Enforcement Projects
We all use smart-phones. With them we surf the Internet, do research and download and use apps.
Cookie banners are regulated under the ePrivacy directive.
Credit scoring is the practice of giving individuals a credit worthiness score in order to determine whether to lend them money or extend a post-paid service
Data Portability (Art 20 GDPR)
Data portability empowers individuals to receive personal data they provided to the controller and, where technically feasible, to request this p
Dating apps are gaining popularity, especially after Covid-19.
Encryption - Privacy by Design
Our emails always contain personal data.
EU-US Data Transfers
Since 2013 this case on US mass surveillance and EU companies feeding into it, is pending.
Many companies take advantage of the digitalisation of their services and collect far more data about their customers than necessary.
Forced Consent (DPAs in Austria, Belgium, France, Germany and Ireland)
When relying on consent as a legal basis to process personal data, companies need to comply with the stringent requirements contained in the GDPR.
Regardless of the purpose, processing of personal data must be based on a lawful basis. Article 6 GDPR sets out different lawful bases for processing.
The value and descriptive force of metadata is being increasingly recognized.
Right to rectification (Art 16 GDPR)
There is a basic right for every user to request their data to be corrected in case of inaccuracies: quickly, easily, and free of charge.
Soft opt-in (details not available to public)
‘Soft opt-in’ implies your consent to receive marketing communication about similar products or services already ordered from a company.
In 2018, data subjects represented by noyb, submitted requests to access information about their data with eight streaming services.
Certain platforms process personal data (photos, contact details, etc) which do not belong exclusively to their users, for example when other users upload a
Current Research Projects
National Administrative Procedure
noyb is currently reviewing the national procedures before Data Protection Authorities (DPAs), as they are often fundamentally different (e.g.
National Implementation of GDPR
The General Data Protection Regulation (“GDPR”) became directly applicable throughout the EU on 25 May 2018.
Online tracking is only a part of the problem. Imagine if advertisers could see what you do and buy in physical stores.