noyb WIN: Dutch authority fines Netflix €4.75 Million

Data Subject Rights noyb has achieved a win against Netflix.

Right of Access Procedures Right of Access Recipient Personal Data Supervisory Authorities

Dec 18, 2024Sourcenoyb.eu

Full text

Data Subject Rights noyb has achieved a win against Netflix. Almost five years after the complaint has been filed, the Dutch data protection authority (DPA) has finally issued a decision. The authority is imposing a fine of €4.75 million against the streaming provider because it failed to adequately inform customers about what it does with their data. Press release from the Dutch DPAOriginal noyb complaint against NetflixEight complaints, no company fully complied. In January 2019, noyb filed eight complaints against a series of streaming providers such as Amazon, Apple Music, Spotify, YouTube – and of course Netflix. All of these companies failed to adequately respond to users’ access requests under Article 15 GDPR in one way or another. According to the right of access, companies are obliged to grant their users access to a copy of all raw data that it about the user, as well as additional information about the sources and recipients of the data, the purpose for which the data is pro

How it connects

Related across sources

C/16/608667 / HA RK 26-54 The data subject was involved in disputes with a school organisation ("controller") Those disputes concerned a communication ban, their membership in a participation council, and their internship. The data subject submitted an access request under Article 15… C/16/608667 / HA RK 26-54 ·Rb. Midden-Nederland Sep 22, 2026 Right of Access Personal Data Controllers

€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation

W101 2326836-1 40 natural persons submitted access requests to a mobile communications provider (controller) via an attorney Some of these persons were (former) customers of the controller, others have never been in a contractual relationship with the controller. In the access requests, the data… BVwG - W101 2326836-1 ·Federal Administrative Court Oct 2, 2026 Personal Data Right of Access Right to Restriction

Danish DPA finds employer unlawfully refused former employee's access request The DPA received a complaint from a former employee (data subject) of the controller concerning the refusal of an access request. More specifically, the data subject was dismissed… 2025-31-2078 ·Denmark ·Datatilsynet (DK) Sep 24, 2026 Right of Access Personal Data Supervisory Authorities

C-154/21 RW v Österreichische Post AG The Court of Justice of the European Union (First Chamber), in response to a preliminary reference from the Oberster Gerichtshof (Austrian Supreme Court), interpreted Article… CJEU ·First Chamber Jan 12, 2023 Personal Data Right of Access Right to Restriction

C-579/21 Proceedings brought by J.M In Case C-579/21, the Court of Justice of the European Union ruled on a preliminary reference from the Itä-Suomen hallinto-oikeus (Administrative Court of Eastern Finland)… CJEU ·First Chamber Jun 22, 2023 Personal Data Right of Access Accuracy