Skip to content
News·noyb - European Center for Digital RightsEN
Export

Austrian Supreme Court: Meta must give users full access to their data

Online & Mobile tracking Austrian Supreme Court (OGH): Meta must provide full access to all personal data of user within 14 days, including the sources, recipients and purposes for which each information was used.

Full text

Online & Mobile tracking Austrian Supreme Court (OGH): Meta must provide full access to all personal data of user within 14 days, including the sources, recipients and purposes for which each information was used. All of Meta's claims of trade secrets or other limitations were rejected, leading to unprecedented access to the inner workings of Meta. Meta was also illegally collecting data from third party apps and websites and may only provide personalised advertisement if a user provided “specific, informed, unambiguous and freely given” consent. Meta must also ensure that data revealing sensitive information (such as political views, sexual orientation, or health) is not processed together with other data unless a valid legal basis according to Article 9(2) GDPR applies. Meta may not avoid the application of Article 9 GDPR by arguing that it does not intentionally collect such data or that it cannot technically distinguish or segregate it. The case, brought by Max Schrems in 2014, ori

How it connects

C-13/16 Valsts policijas Rīgas reģiona pārvaldes Kārtības policijas pārvalde v Rīgas pašvaldības SIA "Rīgas satiksme" In Case C-13/16, the Court of Justice of the European Union (Second Chamber) addressed a preliminary ruling from the Latvian Supreme Court in proceedings between the Riga Regional… CJEU ·Second Chamber May 4, 2017 Legitimate Interest Personal Data Lawful Basis
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Records of processing activities
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Fairness & Transparency
C-201/14 Smaranda Bara and Others v Casa Naţională de Asigurări de Sănătate and Others The Court of Justice of the European Union (Third Chamber) addressed whether Articles 10, 11, and 13 of Directive 95/46/EC require a public administrative body transferring… CJEU ·Third Chamber Oct 1, 2015 Personal Data Data Portability Material scope (GDPR)