Vienna Superior Court: Facebook must give access to data

The Viennese Superior Court (Oberlandesgericht Wien) has delivered a ruling today that Facebook must pay Mr Schrems € 500 in emotional damages and grant him full access to all the data that Facebook holds about him. However, the internet giant does not need to get consent from users to use their data under the EU data protection law (Article 6(1)(a) GDPR). Instead Facebook can simply grant itself the right to use all data in its terms and conditions (Article 6(1)(b) GDPR). Judgment (German Original, Relevant Parts from Page 22) Judgment (English Machine Translation, Relevant Parts from Page 22) Facebook's "consent bypass" legal? The GDPR allows different bases for the processing of personal data: For example, consent or a contract. Civil law contracts do not need to fulfill the strict requirements of "consent" under the GDPR. This would mean that the company does not have to give users a free choice and obtain separate and unambiguous consent. Other than under the system for consent, u