News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Years of inactivity in “Pay or OK” cases: noyb sues German DPAs

Forced Consent & Consent Bypass In August 2021, noyb had filed several complaints against news sites using unlawful ‘Pay or OK’ systems with German data protection authorities (DPAs).

Supervisory Authorities Consent Monitoring Marketing Targeted Advertising and Personalization under DSA
Jun 17, 2025 Source noyb.eu

Full text

Forced Consent & Consent Bypass In August 2021, noyb had filed several complaints against news sites using unlawful ‘Pay or OK’ systems with German data protection authorities (DPAs). Despite the fact that only about 3 to 10% of people want tracking for personalised advertising, these systems lead to consent rates of more than 99%. Almost four years after the filing of the complaints, the DPAs of North Rhine-Westphalia and Hesse still haven’t managed to issue a decision on the merits. Quite the opposite: In order to avoid finally deciding the case, the DPA of North-Rhine Westphalia has even issued a 12-page decision that it cannot decide yet. Today, noyb took both authorities to court for their year-long inactivity. “Pay or OK” Complaints from 2021Background to ‘Pay or OK’. In August 2021, noyb filed two GDPR complaint against the ‘Pay or OK’ banners on the news sites faz.net and t-online.de. At the time, the complainant (and all other users) had to decide whether to allow the websites

How it connects

Related across sources

C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 IP Address Controllers Personal Data
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
C-422/24 Case C-422/24 - AB Storstockholms Lokaltrafik. A new page has been created with the following information: "" CJEU Jan 7, 2026 Personal Data Fairness & Transparency Controllers
SAN 3154/2026 National court annuls DPA sanction against KFC Spain over website privacy information In May 2021, a data subject lodged a complaint with the DPA against KFC Restaurants Spain, S.L.U., the controller, concerning the processing of personal data through its website.… Jul 16, 2026 Supervisory Authorities Personal Data Controllers
CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is Processing: Communication of personal data in response to a request for access to documents constitutes processing. (¶69) Jun 29, 2010 Personal Data Legitimate Interest Right to Restriction
Related documents