Spotify fined € 5 Million for GDPR violation

Data Subject Rights Following a noyb complaint and litigation over inactivity, the Swedish Data Protection Authoirty (IMY) has issued a fine of 58 Mln Swedish Crown (about € 5 Million) against Spotify. While users have a right to get access to all their data and information on the use of their data, Spotify did not fully comply with this obligation. The IMY was in charge of the case because Spotify has its main establishment in Sweden. The noyb complaint was joined with a complaint filed in the Netherlands by Bits of Freedom. noyb action from 18 January 2019noyb complaint against SpotifyIMY decision (Swedish)IMY media update (Swedish)IMY decision (Autotranslation)Complaint. On 18 January 2019 noyb has filed a number of complaint against various streaming services, as they did not provide users with an easy way to exercise their right to access under Article 15 GDPR. One of these complaints was filed in Austria and concerned Spotify's failure to provide all personal data and information