Search

  • Twitter’s AI plans hit with 9 more GDPR complaints

     / article  / 
    Artificial Intelligence
    Twitter did not inform users about personal data being used for AI training and did not seek consent.
    … DPC Personal data of 60 million people to train AI? As if Meta’s failed attempt to illegally use people’s personal … logical choice would be opt-in consent, Twitter – much like Meta – claims that it has a " legitimate interest " that … been rejected by the Court of Justice in a case concerning Meta’s use of personal data for targeted advertising. …
    Read more

  • Annual Report 2023 out now!

     / article
    2023 was the year of major decisions leading to record fines against companies
    … cases of 2023 are noyb’s first two complaints against Meta’s “Pay or Okay” system . In November 2023, the company … fines. The year began with the Irish DPC ordering Meta to pay a whopping € 390 million in early January . At the end of May 2023, Meta was fined € 1.2 billion and was ordered to stop …
    Read more

  • Fines resulting from noyb litigation

     / page

    The GDPR gives data protection authorities (DPAs) the power to impose an administrative fine of up to 4% of a company’s annual turnover or € 20 million if they violate the GDPR, depending on which sum is higher.

    The purpose of these fines is to deter similar infringements in the future. Although a noyb study found that they are among the most effective enforcement tools available to authorities, significant fines for GDPR violations are extremely rare. The fines go to the country where the proceedings take place, which almost always the country where the fined company has its headquarters.

    Since 2018, the following fines have been imposed on the basis of noyb complaints:

    … € 1.2 billion fine for Meta over EU-US data transfers At the end of 2023, Meta was fined € 1.2 billion and ordered to stop … transferred outside the European Union. US companies like Meta can’t meet this requirement. This also was confirmed by …
    Read more

  • (Preliminary) noyb WIN: Meta stops AI plans in the EU

     / article  / 
    Forced Consent & Consent Bypass
    First reaction to Meta's announcement to stop using personal data for AI training in the EU/EEA
    … 100 … Short update by the DPC Meta Statement DPC makes "U-turn" after initially approving Meta AI. While the DPC initially approved the introduction of Meta AI in the EU/EEA, it appears that other regulators have …
    Read more

  • noyb urges 11 DPAs to immediately stop Meta's abuse of personal data for AI

     / article  / 
    Forced Consent & Consent Bypass
    noyb urges DPAs in 11 countries to immediately stop Meta's use of personal data for undefined "AI technology"
    … , Norway (with NCC)*, Poland and Spain ) Overview of Meta's (false) spins regarding Meta AI All non-public data for some undefined future "AI … data to train a specific AI system (e.g. a chatbot), Meta's new privacy policy basically says that the company …
    Read more

  • AG at CJEU: Facebook must "minimize" personal data for ads in EU

     / article  / 
    Online Advertising
    Today, the attorney general published his opinion in the case C-446/21. Here is noyb's first reaction.
    … must be limited by time, type and source. So far, Meta uses all the data it has ever collected for … of "data minimisation" in Article 5(1)(c) GDPR. So far, Meta has simply ignored this and has not foreseen any … network -v- on third pages). Katharina Raabe-Stuppnig: "Meta has basically been building a huge data pool on users …
    Read more

  • EDPB Opinion: Meta cannot rely on "Pay or Okay"

     / article  / 
    Forced Consent & Consent Bypass
    First Update on the EDPB's "pay or okay" opinion on larger platforms.
    … of the term "freely given consent" when analysing Meta's "Pay or Okay" system, which charged users more than € … purposes and paying a fee ". Max Schrems: " Overall, Meta is out of options in the EU. It must now give users a … get all the relevant numbers for further decisions beyond Meta and larger platforms. " Third option needed.   The EDPB …
    Read more

  • 'Pay or Okay' explained: Why more and more websites make you pay for your privacy

     / article  / 
    Forced Consent & Consent Bypass
    How do pay or consent systems work and what are the issues? Max Schrems explains it all in this explainer video
    … 100 … … In November 2023, Meta introduced a paid subscription for Instagram and … Court of Justice (CJEU) ruling in July 2023, which declared Meta's handling of user data illegal. Now, instead of asking … their privacy online. If the approach is legitimised for Meta, companies across all industries could follow suit - …
    Read more

  • "Pay or Okay": 1,500 € a year for your online privacy?

     / article  / 
    Forced Consent & Consent Bypass
    Should “Pay or Okay” be legitimised for Meta, companies across all industries could follow its lead. But what’s the current situation in the member states?
    … risk. After the European Court of Justice (CJEU) declared Meta’s handling of user data illegal  in July 2023, Meta switched to a “Pay or Okay” system to once again bypass … “Pay or Okay”. If the EDPB legitimises the approach for Meta, more and more companies will follow the example and …
    Read more

  • 28 NGOs urge EU DPAs to reject “Pay or Okay” on Meta

     / article  / 
    Forced Consent & Consent Bypass
    The European Data Protection Board (EDPB) will soon issue what is likely to be its most significant opinion to date
    … Board DPA’s request for an EDPB opinion on “consent or pay” Meta says “pay for your rights”. After the European Court of Justice (CJEU) declared Meta’s handling of user data illegal last July, Meta jumped to the next best option to bypass the GDPR and …
    Read more

  • Meta ignores the users’ right to easily withdraw consent

     / article  / 
    Forced Consent & Consent Bypass
    If Instagram and Facebook users want to withdraw their consent, they have to buy an expensive subscription
    … 100 … Complaint against Meta on the withdrawal issue (EN) Previous complaint … relating to the consent phase (EN – Machine translation) Meta’s latest attempt to circumvent EU privacy laws. It has … since the European Court of Justice (CJEU) ruled that Meta’s handling of user data was illegal . Yet the social …
    Read more

  • noyb files GDPR complaint against Meta over “Pay or Okay”

     / article  / 
    Forced Consent & Consent Bypass
    Meta charges up to €251.88 to respect the fundamental right to privacy of EU users. This is a violation of the GDPR
    … The European Court of Justice (CJEU) ruled in July that Meta’s handling of user data for personalized ads was … that: In January, the European Data Protection Board fined Meta €390 million for this violation and ordered the company … from 2018 . In its next attempt to undermine EU law, Meta now wants to charge people for choosing a …
    Read more

  • Address trader sues German DPA to prevent noyb from accessing files

     / article  / 
    Credit Scoring
    noyb asked the Hessian authority for access to the case file of the Acxiom complaint. The address trader filed an interim injunction against the authority
    … of people and works with international clients such as Meta, Adobe, Google, IBM and PayPal. noyb will not back down …
    Read more

  • Meta (Facebook / Instagram) to move to a "Pay for your Rights" approach

     / article  / 
    Forced Consent & Consent Bypass
    In order to bypass the GDPR, Meta apparently plans to move to a "Pay for your Rights" approach
    … 100 … Meta (Facebook / Instagram) to move to a "Pay for your Rights" approach The Wall Street Journal reported that Meta plans to move to a "Pay for your Rights" model, where … such as Instagram and Facebook. History has shown that Meta's regulator, the Irish DPC, is likely to agree to any …
    Read more

  • Annual Report 2022 out now!

     / article
    2022 was the year of major decisions in our long-standing cases on EU-US data
    transfers
    … its draft decision on our “forced consent” case against Meta from 2018, which resulted in a fine of € 390 Million …
    Read more

  • 23 years of illegal data transfers due to inactive DPAs and new EU-US deals

     / article  / 
    Data Transfers
    A new noyb analysis now shows how a combination of inactive DPAs and a new deal by the EU Commission lead to 23 years of privacy violations
    … using services like Google Analytics or tracking tools by Meta which entail unlawful data transfers to the USA. A new … to forward data about their visitors to Google and Meta servers in the United States. Despite explicit … (DPC) – so the supervisory authority for Google and Meta – is one of the 20 DPAs that have not yet lifted a …
    Read more

  • 5 years of litigation: Meta apparently switches to consent for behavioral ads

     / article  / 
    Forced Consent & Consent Bypass
    Meta announced they will soon switch to "consent" for behavioral ads. Exactly what consequences this will have remains to be seen
    … 100 … Meta apparently switches to consent for behavioral ads after … Kartellamt and decisions by the EDPB and CJEU it seems that Meta finally complies with EU privacy laws. The company … showing behavioral ads in the future. It is uncelar if Meta fully applies the consent requirement. noyb will follow …
    Read more

  • Norwegian DPA temporarily bans behavioral advertising on Facebook and Instagram

     / article  / 
    Forced Consent & Consent Bypass
    The Norwegian DPA is the first national data protection authority declaring behavioral advertising on Meta platforms illegal. noyb welcomes this decision
    … and Instagram Following a CJEU ruling that declared Meta/Facebook’s GDPR approach largely illegal, the Norwegian … imposes a temporary ban for the usage of said approach by Meta. noyb welcomes this decision as a first important step … the Norwegian DPA on the ban of behavioral advertising on Meta platforms CJEU declares Meta/Facebook’s GDPR approach …
    Read more

  • CJEU declares Meta/Facebook's GDPR approach largely illegal

     / article
    In today's decision, the CJEU declared Meta/Facebook's GDPR approach largely illegal - similar to noyb's previous litigation before the EDPB leading to a fine of € 390 million.
    … million fine Background on the "forced consent" approach by Meta Background on Meta's move to "legitimate interest" First Statement. noyb … From the live reading of the holding, it seems that Meta/Facebook was barred from using anything but consent for …
    Read more

  • noyb win: First major fine (€ 1 million) for using Google Analytics

     / article  / 
    Data Transfers
    Swedish data protection authority (IMY) issued decisions against four companies and imposed a fine of 12 mio SEK (1 mio Euro) against Tele2 and 300.000 SEK against CDON
    … many EU businesses continue to use services of Google, Meta, Microsoft, Amazon and alike. Many companies however …
    Read more