noyb got operational on May 25th 2018. We are currently starting with the first projects, of which many are researching enforcement options. Below you can find a list of projects we are currently working on. Some are work in progress, so we cannot tell the public too much about them - yet...
Current Enforcement Projects
We all use smart-phones. With them we surf the Internet, do research and download and use apps.
Cookie banners are regulated under the ePrivacy directive.
Credit scoring is the practice of giving individuals a credit worthiness score in order to determine whether to lend them money or extend a post-paid service
Dating apps process important amounts of personal data, including sensitive data, such as users’ location, sexual orientation, age, photos, date of birth and
While quite recent in Europe, the private testing of individuals’ DNA is becoming increasingly pervasive every year.
Encryption - Privacy by Design
Our emails always contain personal data.
EU-US Data Transfers (Court of Justice of the European Union)
In 2013, Edward Snowden disclosed that the US Intelligence Agencies have access to the personal data of European Facebook users with the aid of surveillance
Many companies take advantage of the digitalisation of their services and collect far more data about their customers than necessary.
Forced Consent (DPAs in Austria, Belgium, France, Germany and Ireland)
When relying on consent as a legal basis to process personal data, companies need to comply with the stringent requirements contained in the GDPR.
Regardless of the purpose, processing of personal data must be based on a lawful basis. Article 6 GDPR sets out different lawful bases for processing.
The value and descriptive force of metadata is being increasingly recognized.
Soft opt-in (details not available to public)
‘Soft opt-in’ implies your consent to receive marketing communication about similar products or services already ordered from a company.
In 2018, data subjects represented by noyb, submitted requests to access information about their data with eight streaming services.
Certain platforms process personal data (photos, contact details, etc) which do not belong exclusively to their users, for example when other users upload a
Current Reasearch Projects
National Administrative Procedure
noyb is currently reviewing the national procedures before Data Protection Authorities (DPAs), as they are often fundamentally different (e.g.
National Implementation of GDPR
The General Data Protection Regulation (“GDPR”) became directly applicable throughout the EU on 25 May 2018.
Online tracking is only a part of the problem. Imagine if advertisers could see what you do and buy in physical stores.