Skip to content
News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Data protection in times of coronavirus: not a question of if, but of how

In recent days, the discussions around the use of data to combat the corona pandemic have increased.

Full text

In recent days, the discussions around the use of data to combat the corona pandemic have increased. Therefore, we have written an ad hoc paper v0.3 (PDF, English) on compliance with the GDPR and would like to take this opportunity to provide an initial overview of these projects. Overview of various measures and projects There is a lot of talk about various corona measures and projects that are intended to contain the spread of the virus by using data. These include, for example: Information portals (such as information for self-diagnosis or maps of risk areas), anonymous data analytics (especially from mobile phone networks), apps that attempt to record possible infection situations (contact tracing), apps to check quarantine measures attempts to track infected persons via various data such as mobile phone tracking or the use of credit card data. In an article on GDPRhub.eu, noyb has compiled a first overview of concrete apps and projects in Europe and beyond, in order to shed some l

How it connects

C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 IP Address Controllers Personal Data
C-33/22 Österreichische Datenschutzbehörde v WK In Case C-33/22, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary reference from the Austrian Verwaltungsgerichtshof regarding whether a… CJEU ·Grand Chamber Jan 16, 2024 Material scope (GDPR) Supervision Public Authority
15625/2026 Cass.Civ. - 15625/2026 Istituto nazionale della previdenza sociale (INPS, the controller) is the Italian National Institute for Social Security. In 2021, the DPA fined the controller €300,000 for its… Supreme Court May 21, 2026 Privacy by Design & Default Privacy by Design DPIA
W258 2227269-1/39E Austrian court reviews postal service selling political affinity data of customers On the 8 January 2019, the Austrian DPA (Datenschutzbehörde – DSB) launched an investigation into the actions of the Austrian postal service as it also had a business license for… Federal Administrative Court Dec 27, 2024 Marketing Personal Data Legitimate Interest
473833 The DPA imposed an €8 million administrative fine on Apple (the controller) in 2022 (CNIL - SAN-2022-025) The DPA found that Apple used identifiers stored on users’ devices to enable personalized advertising in the App Store without first obtaining valid user consent, as required by… CE - 473833 ·Supreme Administrative Court Oct 10, 2025 Material scope (GDPR) Personal Data Consent