OGH - 6Ob189/24y

|Initial_Contributor=|Initial_Contributor= || }}}}The Supreme Court held that Meta has to provide its user with full access to all personal data, including sources, recipients, and purposes; a mere exemplary list is insufficient. Further, the court held that personalized advertising and processing of (sensitive) personal data from third party websites require the data subject’s consent. The Austrian Supreme Court held that Meta must provide users full access to all personal data, including sources, recipients, and purposes, within 14 days and that personalized advertising and processing of sensitive data require explicit consent under GDPR. Meta cannot evade these obligations by claiming technical limitations. == English Summary ==== English Summary == The data subject argued that Meta unlawfully processed his personal and sensitive data, failed to provide full access to all personal data upon request, and collected personal data from users through social plugins, third-party apps, and