Search

  • Annual Report 2024 out now!

     / article
    Our achievements in 2024 prove once again that we can make an impact: In addition to filing 36 new complaints, we also obtained a number of new decisions from authorities and a CJEU ruling
    Read more

  • Frequently asked questions about Pay or Okay

     / page

    So-called Pay or Okay systems are on the rise in Europe. First introduced by journalistic websites that wanted to boost their consent rates, Meta adopted the approach for Instagram and Facebook in November 2023.

    Below, we compiled a number of the most frequently asked questions about Pay or Okay to explain what this is all about and why this approach is dangerous for consent online.

    … websites that wanted to boost their consent rates, Meta adopted the approach for Instagram and Facebook in …
    Read more

  • EU Court: Irish DPC must investigate noyb complaint

     / article  / 
    National Administrative Procedures and DPA inactivity
    The DPC refused to comply with a binding decision by the EDPB. Instead, the DPC sued the EDPB before the European Courts. The case can now be appealed to the CJEU
    … Data Protection Board (EDPB) held in December 2022 that Meta illegally used the personal data of users for …
    Read more

  • Data Protection Day: Only 1.3% of cases before EU DPAs result in a fine

     / article  / 
    National Administrative Procedures and DPA inactivity
    European data protection authorities almost never impose fines for GDPR violations
    … isn’t. Almost all major tech companies like Apple, Google, Meta and Microsoft are located in Ireland, making the Irish … its own good fortune. noyb ’s two biggest cases against   Meta had to take a detour to the EDPB before the DPC finally …
    Read more

  • US Cloud soon illegal? Trump punches first hole in EU-US Data Deal

     / article  / 
    Data Transfers
    Trump paralysed the "Privacy and Civil Liberties Oversight Board" (PCLOB), a key element of the EU-US data transfer deal that allows EU-US data flows.
    … the US government to access any data stored with Amazon, Meta, Microsoft, Google and any other US Big Tech firm …
    Read more

  • Ads: Meta wants to be 'less illegal' - but much more annoying...

     / article  / 
    Forced Consent & Consent Bypass
    In the battle over the illegal use of personal data for advertisement, Meta has announced another variation: This time Meta will try "less personalized" ads, which may annoy users into consenting.
    … on LinkedIn noyb's "Pay or Okay" complaint against Meta First Statement: Annoy people into consent? The new … personalized' is 'less illegal' - but this does not mean Meta is now acting 'legal'. It is like being proud of … use their personal data and ads that do not. We doubt that Meta's fourth iteration of trying to bypass EU law will be …
    Read more

  • CJEU: Meta must "minimise" use of personal data for ads

     / article  / 
    Online & Mobile tracking
    In today's ruling in C-446/21 (Schrems v. Meta), the Court of Justice of the European Union (CJEU) has fully backed a lawsuit brought against Meta, over its Facebook service.
    … Use of data for advertising must be "minimised". So far, Meta uses all personal data it has ever collected for … to limit the processing to strictly necessary data. So far, Meta and many other players in the online advertising space … to the national courts. Katharina Raabe-Stuppnig: "Meta has basically been building a huge data pool on users …
    Read more

  • Twitter’s AI plans hit with 9 more GDPR complaints

     / article  / 
    Artificial Intelligence
    Twitter did not inform users about personal data being used for AI training and did not seek consent.
    … DPC Personal data of 60 million people to train AI? As if Meta’s failed attempt to illegally use people’s personal … logical choice would be opt-in consent, Twitter – much like Meta – claims that it has a " legitimate interest " that … been rejected by the Court of Justice in a case concerning Meta’s use of personal data for targeted advertising. …
    Read more

  • Annual Report 2023 out now!

     / article
    2023 was the year of major decisions leading to record fines against companies
    … cases of 2023 are noyb’s first two complaints against Meta’s “Pay or Okay” system . In November 2023, the company … fines. The year began with the Irish DPC ordering Meta to pay a whopping € 390 million in early January . At the end of May 2023, Meta was fined € 1.2 billion and was ordered to stop …
    Read more

  • Fines resulting from noyb litigation

     / page

    The GDPR gives data protection authorities (DPAs) the power to impose an administrative fine of up to 4% of a company’s annual turnover or € 20 million if they violate the GDPR, depending on which sum is higher.

    The purpose of these fines is to deter similar infringements in the future. Although a noyb study found that they are among the most effective enforcement tools available to authorities, significant fines for GDPR violations are extremely rare. The fines go to the country where the proceedings take place, which almost always the country where the fined company has its headquarters.

    Since 2018, the following fines have been imposed on the basis of noyb complaints:

    … € 1.2 billion fine for Meta over EU-US data transfers At the end of 2023, Meta was fined € 1.2 billion and ordered to stop … transferred outside the European Union. US companies like Meta can’t meet this requirement. This also was confirmed by …
    Read more

  • (Preliminary) noyb WIN: Meta stops AI plans in the EU

     / article  / 
    Artificial Intelligence
    First reaction to Meta's announcement to stop using personal data for AI training in the EU/EEA
    … 1419 … Short update by the DPC Meta Statement DPC makes "U-turn" after initially approving Meta AI. While the DPC initially approved the introduction of Meta AI in the EU/EEA, it appears that other regulators have …
    Read more

  • noyb urges 11 DPAs to immediately stop Meta's abuse of personal data for AI

     / article  / 
    Artificial Intelligence
    noyb urges DPAs in 11 countries to immediately stop Meta's use of personal data for undefined "AI technology"
    … , Norway (with NCC)*, Poland and Spain ) Overview of Meta's (false) spins regarding Meta AI All non-public data for some undefined future "AI … data to train a specific AI system (e.g. a chatbot), Meta's new privacy policy basically says that the company …
    Read more