Search

The EDPB has decided that three Meta Apps (Facebook, Instagram and WhatsApp) did not have a legal basis to process user data since May 2018. Meta's legal trick has been rejected.

The Stockholm administrative court held that a complainant under Article 77 GDPR has the right to request a decision from the Swedish Data Protection Authority (IMY) after six months.

More and more websites have added an option to say “no” to cookies and other tracking- as foreseen by the GDPR. Where did this trend come from?

Complaint against the news magazine Profil: If you want to visit profil.at, you can reject all cookies in the first step. If you do so, however, a second banner pops up.

The Advocate General of the CJEU has issued a non-binding opinion, aiming to limit one of the last potential avenues for users to enforce their privacy rights under the GDPR.

Advocate General Sánchez-Bordona issued his Opinion on CJEU case C-300/21 (UI v. Österreichische Post AG), the first of several preliminary ruling requests on the topic of damages for GDPR violations

Today, the US government published an executive order, allegedly limiting US surveillance. This is a first statement by noyb.

6 months ago, EU Commission President von der Leyen and US President Biden announced an agreement on EU-US data transfers "in principle". Until this day, there is still no agreement.

Today, noyb.eu filed a complaint against Google with the French Data Protection Authority (CNIL). The tech giant has repeatedly ignored the European Court of Justice (CJEU) ruling on direct marketing

Final round on “One Trust” cookie banners: 226 complaints lodged by noyb against deceptive cookie banners that are still not complying with GDPR requirements.

2021 marks noyb’s fourth year of fighting for the right to privacy. We have taken things up a notch by filing a record-breaking amount of complaints.

The company can no longer process biometric data of people in Greece and must delete all existing data.

The Italian DPA (GPDP) has joined the consensus shared by the EDPS, as well as the French and Austrian DPA and has banned the use of Google Analytics (GA).

The Swedish DPA (IMY) refuses to take a decision on a GDPR complaint, claiming that the user is not a party to his own rights. Today, noyb filed an appeal.

A customer made an access request to receive his location data which was refused by Virgin Telco. The AEPD sided with the company. noyb files appeal.

When the GDPR became applicable on 25 May 2018, it was perceived as a watershed moment. The past 4 years have shown that a law alone does not change business models.

As more and more details emerge, Max Schrems wrote an Open Letter on the announcement of a new EU-US data transfer framework.

While some DPAs thoroughly investigated noyb's 101 cases on EU-US Data Transfers, others just started dismissing cases for questionalbe reason. Is the coordinated effort promoted by the EDPB failing?