News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Austrian Supreme Court: Meta must give users full access to their data

Special Categories of Data Lawful Basis Types of Special Categories of Personal Data Monitoring Political Opinions Article 9 Special Categories Processing Conditions Consent Personal Data
Dec 18, 2025 Source

How it connects

References

Related across sources

Guidance Guidelines 8/2020 on the targeting of social media users EDPB Enforcement AEPD investigates University of Navarra over student COVID-19 vaccination status requests AEPD (Spain) Case Law VwGH - VwGH Ro 2025/04/0007-7 Austrian Administrative Supreme Court Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Supreme Court Case Law Judgment of the Court (Eighth Chamber) of 19 December 2024.#MK v K GmbH.#Request for a preliminary ruling from the Bundesarbeitsgericht.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 88(1) and (2) – Processing in the context of employment – Employees’ personal data – More specific rules provided for by a Member State pursuant to that Article 88 – Obligation to comply with Article 5, Article 6 Court of Justice of the European Union Case Law Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s Court of Justice of the European Union

Full text

Online & Mobile tracking Austrian Supreme Court (OGH): Meta must provide full access to all personal data of user within 14 days, including the sources, recipients and purposes for which each information was used. All of Meta's claims of trade secrets or other limitations were rejected, leading to unprecedented access to the inner workings of Meta. Meta was also illegally collecting data from third party apps and websites and may only provide personalised advertisement if a user provided “specific, informed, unambiguous and freely given” consent. Meta must also ensure that data revealing sensitive information (such as political views, sexual orientation, or health) is not processed together with other data unless a valid legal basis according to Article 9(2) GDPR applies. Meta may not avoid the application of Article 9 GDPR by arguing that it does not intentionally collect such data or that it cannot technically distinguish or segregate it. The case, brought by Max Schrems in 2014, ori

Original document at the source noyb.eu

Similar Content