Search

Some mobile apps share your personal data immediately after they're opened. This isn't compliant with EU privacy laws

noyb filed three complaints against Fitbit. The health and fitness company forces new app users to consent to data transfers

2022 was the year of major decisions in our long-standing cases on EU-US data
transfers

A new noyb analysis now shows how a combination of inactive DPAs and a new deal by the EU Commission lead to 23 years of privacy violations

Meta announced they will soon switch to "consent" for behavioral ads. Exactly what consequences this will have remains to be seen

noyb filed a complaint against Ryanair. When booking through an online travel agent, the airline pushes some customers to go through an invasive facial recognition process

Today, noyb files complaints against 15 Belgian news sites using unlawful cookie banners. Among them are news outlets like RTL Belgium, Het Laatste Nieuws and L'Avenir

The Norwegian DPA is the first national data protection authority declaring behavioral advertising on Meta platforms illegal. noyb welcomes this decision

The Data Protection Authority of Lower Saxony (LfD) decided that the “Pay or Okay” solution used by heise.de was unlawful

EU Commissioner Reynders repeatedly attacked "non-profits" like noyb, alleging they bring cases before the CJEU as a "business model".

European Commission announces third "Safe Harbor", without substantial changes. noyb will bring third adequacy decision back to CJEU.

In today's decision, the CJEU declared Meta/Facebook's GDPR approach largely illegal - similar to noyb's previous litigation before the EDPB leading to a fine of € 390 million.

Today the European Commission has issued a proposal to fix the (lack of) cooperation between some Data Protection Authorities (DPAs). It is a step back - not forwad.

Swedish data protection authority (IMY) issued decisions against four companies and imposed a fine of 12 mio SEK (1 mio Euro) against Tele2 and 300.000 SEK against CDON

Yesterday, the Irish DPC managed a narrow win in Parliament and got a new law passed that shall make criticism of DPC procedures impossible.

The Irish government tries to sneak a provision into the Irish Data Protection Law allowing any part of the procedure being declared "confidential". Legitimate criticism would become a crime.

TeleSign generates a “reputation score” and sells it to various clients. TeleSign secretly received the mobile phone data from BICS, a Belgian company that provides interconnection services

CNIL fined CRITEO, the biggest online advertisement and tracking company in Europe €40 Mio based on complaints by noyb and Privacy International.

Following a noyb complaint and litigation over inactivity, the Swedish Data Protection Authoirty (IMY) has issued a fine of about € 5 million against Spotify.