News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Austrian Supreme Court: Meta must give users full access to their data

Online & Mobile tracking Austrian Supreme Court (OGH): Meta must provide full access to all personal data of user within 14 days, including the sources, recipients and purposes for which each information was used.

Personal Data Political Opinions Lawful Basis Consent Monitoring
Dec 18, 2025 Source noyb.eu

Full text

Online & Mobile tracking Austrian Supreme Court (OGH): Meta must provide full access to all personal data of user within 14 days, including the sources, recipients and purposes for which each information was used. All of Meta's claims of trade secrets or other limitations were rejected, leading to unprecedented access to the inner workings of Meta. Meta was also illegally collecting data from third party apps and websites and may only provide personalised advertisement if a user provided “specific, informed, unambiguous and freely given” consent. Meta must also ensure that data revealing sensitive information (such as political views, sexual orientation, or health) is not processed together with other data unless a valid legal basis according to Article 9(2) GDPR applies. Meta may not avoid the application of Article 9 GDPR by arguing that it does not intentionally collect such data or that it cannot technically distinguish or segregate it. The case, brought by Max Schrems in 2014, ori

How it connects

References

Related across sources

Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Apr 13, 2021 Marketing IP Address Transparency
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision
CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is Processing: Communication of personal data in response to a request for access to documents constitutes processing. (¶69) Jun 29, 2010 Personal Data Legitimate Interest Right to Restriction
C-184/20 OT v Vyriausioji tarnybinės etikos komisija In Case C-184/20, the CJEU Grand Chamber addressed a preliminary reference from a Lithuanian administrative court concerning OT's challenge to a decision by the Vyriausioji… CJEU ·Grand Chamber Aug 1, 2022 Personal Data Public Authority Health Data
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
C-65/23 MK v K GmbH In a preliminary ruling requested by the German Federal Labour Court (Bundesarbeitsgericht), the Court of Justice of the European Union interpreted Article 88 of the GDPR… CJEU ·Eighth Chamber Dec 19, 2024 Personal Data Integrity and Confidentiality Principle Legitimate Interest
Related documents