noyb WIN: YouTube ordered to honour user’s right of access

Data Subject Rights noyb has achieved a win against YouTube, the video platform provided by Google.

Right of Access Procedures Right of Access Recipient Personal Data Cookies

Aug 29, 2025Sourcenoyb.eu

Full text

Data Subject Rights noyb has achieved a win against YouTube, the video platform provided by Google. After five and a half years, the Austrian data protection authority (DSB) has finally issued a decision siding with noyb – and ordering YouTube to comply with the complainant’s access request in accordance with Article 15 GDPR. Until now, the company withheld a large amount of data, including information about the purpose of the processing, storage periods, data recipients and the tracking cookies used. Decision by the Austrian DPA (DE)Original noyb complaint against YouTubeEight complaints, no company fully complied. In January 2019, noyb filed eight complaints against a series of streaming providers such as Amazon, Apple Music, Spotify, Netflix – and of course YouTube. All of these companies failed to adequately respond to users’ access requests under Article 15 GDPR in one way or another. According to the right of access, companies are obliged to provide users with a copy of their per

How it connects

Related across sources

€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation

C-434/16 Peter Nowak v Data Protection Commissioner C-434/16 (Nowak) CJEU Dec 20, 2017 Personal Data Right of Access Accuracy

SAN 3154/2026 National court annuls DPA sanction against KFC Spain over website privacy information In May 2021, a data subject lodged a complaint with the DPA against KFC Restaurants Spain, S.L.U., the controller, concerning the processing of personal data through its website.… Jul 16, 2026 Supervisory Authorities Personal Data Recipient

C-487/21 Österreichische Datenschutzbehörde v CRIF C-487/21 (Österreichische Datenschutzbehörde) CJEU Oct 26, 2023 Right of Access Data Portability Accuracy

C-141/12 YS v Minister voor Immigratie, Integratie en Asiel and Minister voor Immigratie, Integratie en Asiel v M and S The Court of Justice of the European Union (Third Chamber) addressed whether the legal analysis and reasoning contained in an administrative document prepared prior to a decision… CJEU ·Third Chamber Jul 17, 2014 Personal Data Right of Access Accuracy

C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Personal Data Automated Decision-Making