News

Internationaler Tag der Informationsfreiheit: Deutschland braucht mehr Transparenz!

Internationaler Tag der Informationsfreiheit: Deutschland braucht mehr Transparenz!

Over 40,000 CRIF queries: Klarna, banks and telecoms entangled in CRIF network

Credit Scoring Following an initiative by noyb, more than 2,400 affected individuals requested their data from the credit agency CRIF and have now received it. An evaluation by…

Jahreskonferenz des Digital Cluster Bonn

Jahreskonferenz des Digital Cluster Bonn

Decision to amend the "Decision on Notification Procedures and Data Processing in the Shipping Sector" in connection with the implementation of the Maritime National Single Window.

Decision to amend the "Decision on Notification Procedures and Data Processing in Shipping" in connection with the implementation of the Maritime National Single Window.

Advisory Opinion of the Advisory Division of the Council of State and Further Report ⇄

Act implementing the EU Directive on data exchange for minimum tax ⇄

Decree amending the Decree on reporting formalities and data processing for shipping in connection with the implementation of the Maritime National Single Window ⇄

Children's Rights Impact Assessment on Snapchat ⇄

Children's Rights Impact Assessment on Instagram ⇄

Children's Rights Impact Assessment on TikTok ⇄

Advisory report on effective GDPR communication (legal design pattern) ⇄

Less regulatory burden for entrepreneurs under the General Data Protection Regulation (GDPR) ⇄

Flash Poll MKB Entrepreneurs: Regulatory Burden and GDPR ⇄

EDPB: CJEU ILVA (C-383/23) ruling consistent with Guidelines 4/2022; no change needed

"Having carefully analysed the judgment in case C-383/23 [ILVA, AB], the EDPB considers that the Guidelines 4/2022, and in particular Section 6.2.1, align with this ruling, and…

Budget cuts paralyse Austrian DPA: NGO complaint to the EU Commission

National Administrative Procedures and DPA inactivity The GDPR has been inadequately enforced for years. Despite 3,813 complaints, there were only 62 fines in Austria in 2024.…

Former Meta lobbyist named DPC Commissioner: Meta now officially regulates itself

National Administrative Procedures and DPA inactivity According to reports in the Irish Times and RTE, Niamh Sweeney, a former senior Meta lobbyist, is set to join the Irish Data…

noyb WIN: French DPA fines Google €325 million for “Spam Emails” in Gmail

Forced Consent & Consent Bypass More than three years ago, noyb had filed a complaint against Google for sending unsolicited advertising emails directly to the inboxes of Gmail…

report

The purpose of this study was to assess the transparency of personal data in thirteen specific public registers in relation to European data protection law, and to identify…

In short:

The AIVD (Dutch Intelligence and Security Service) and MIVD (Military Intelligence and Security Service) are also investigating, as part of the implementation of the Temporary…

In short:

Core Objective 24: "The student participates in the digital world" begins with: "The student uses digital systems, data, and protects the privacy of themselves and others in a…

In short:

The Secretary of State has informed the Parliament that, following the IBTD reflection report, the Tax Authority is developing a GDPR-compliant reporting process, improving its…

report ⇄

The purpose of this study was to assess the public nature of personal data in thirteen specific public registers against European data protection law and to identify…

Short: ⇄

The State Secretary informs the House that, following the IBTD reflection report, the Tax and Customs Administration is working on a GDPR-proof notification process, improved…

The BNC Sheet ⇄

Short: ⇄

Likewise, regarding the implementation test of the Temporary Act on Research by the AIVD and MIVD into countries with an offensive cyber program, bulk datasets, and other specific…

Briefly: ⇄

Core objective 24: 'The pupil participates in the digitized world.' begins with: "The pupil handles digital systems, data, and the privacy of themselves and others safely." Which…

Briefing on the Payment services framework ⇄

noyb WIN: YouTube ordered to honour user’s right of access

Data Subject Rights noyb has achieved a win against YouTube, the video platform provided by Google. After five and a half years, the Austrian data protection authority (DSB) has…

Fanpage-Verfahren geht in die nächste Runde

Fanpage-Verfahren geht in die nächste Runde

Court decides "Pay or Okay" on DerStandard.at is illegal

Cookie Banners The Austrian Federal Administrative Court (BVwG) has confirmed an earlier decision by the Austrian Data Protection Authority (DSB) that the Austrian newspaper…

noyb survey: only 7% of users want Meta to use their personal data for AI

Artificial Intelligence Meta has recently started using the personal data of Europeans for AI training. Contrary to its GDPR obligations, Meta hasn’t asked for consent in advance.…

Annual Report 2024 out now!

Almost 7 years after the GDPR came into force, noyb remains to be one of the leading European forces pushing for the fundamental right to data protection for all users. To date,…

noyb's Pay or Okay report: how companies make you pay for privacy

Forced Consent & Consent Bypass So-called ‘Pay or Okay’ systems are on the rise in Europe. First introduced by newspapers in Austria and Germany, Meta adopted the approach for…

Urteil im Fall Fanpages liegt vor: BfDI prüft weitere rechtliche Schritte

Urteil im Fall Fanpages liegt vor: BfDI prüft weitere rechtliche Schritte

How TikTok, AliExpress & WeChat ignore your GDPR rights

Data Subject Rights Today, noyb has filed GDPR complaints against AliExpress, TikTok and WeChat. All three tech companies have failed to comply with access requests under Article…

BfDI startet öffentliche Konsultation zu KI-Modellen

BfDI startet öffentliche Konsultation zu KI-Modellen

TikTok and EU regulations: Legal challenges and insights from various legal fields.

European Parliament (Think Tank), Information Brief: TikTok and EU Regulations: Legal Challenges and Insights from Various Legal Fields (Written by Hendrik Mildebrath and Bente…

The price of free internet: Directions for future online tracking policies.

Report, Rathenau Institute, The cost of free internet: Directions for future online tracking policies.

Priority issues during the Danish presidency of the European Council.

Starting July 1st, Denmark will hold the presidency of the European Union. They plan to focus on digital simplification, including a revision of the Cybersecurity Act.…

Proposal for a regulation of the European Parliament and the Council establishing additional procedural rules relating to the enforcement of Regulation (EU) 2016/679.

Progress has been made on the file concerning the draft regulation of the European Parliament and the Council, which establishes additional procedural rules regarding the…

In short:

From public documents and conversations with employees of the Tax Authority in 2024, it became clear that reports regarding potential fraud by the SME (Small and Medium-sized…

A reassessment of the GDPR: lessons learned from the experience in the United Kingdom.

There is a growing movement for reforms in data protection. The European Commission is proposing specific changes to make compliance easier for small and medium-sized enterprises,…

TikTok and EU Regulation: Legal Challenges and Insights from Various Jurisdictions. ⇄

European Parliament (Think Tank), Information Brief: TikTok and EU Regulation: Legal Challenges and Insights from Various Jurisdictions (Written by Hendrik Mildebrath and Bente…

The price of free internet. Directions for future online tracking policy ⇄

Report, Rathenau Institute, The price of free internet.

Enforcement in Public Transport ⇄

Report, Enforcement in Public Transport. Analysis of the legal framework regarding identification and data exchange. See also the joint response from Iens and the Ministry of…

Kort:

Uit openbare stukken en gesprekken met medewerkers van de Belastingdienst in 2024 bleek dat meldingen over mogelijke fraude door de directie Midden- en Kleinbedrijf niet werden…

GDPR and privacy organization at the Tax and Customs Administration ⇄

Government letter, GDPR and privacy organization at the Tax and Customs Administration. A letter regarding the current state of affairs.

TikTok and EU regulation: Legal challenges and cross-jurisdictional insights

Revisiting the GDPR: Lessons from the United Kingdom experience ⇄

There is momentum for data protection reform, with the European Commission proposing targeted amendments to facilitate compliance for small and medium-sized enterprises, and the…

Priority dossiers under the Danish EU Council Presidency ⇄

As of July 1, the Danes hold the EU Presidency. They intend to work on digital simplification, including the revision of the Cybersecurity Act. In addition, the Digital Networks…

Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 ⇄

Progress on the file of the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of…

Bumble's AI icebreakers are mainly breaking EU law

Artificial Intelligence In December 2023, the dating platform Bumble introduced so-called AI Icebreakers to the “Bumble for Friends” section of the app. Powered by OpenAI’s…

Europäisches Transparenz-Netzwerk gegründet - BfDI übernimmt Vorsitz von ENTRI

Europäisches Transparenz-Netzwerk gegründet - BfDI übernimmt Vorsitz von ENTRI

Informationsfreiheit international unter Druck – Die Zukunft der Informationsfreiheit ist digital

Informationsfreiheit international unter Druck – Die Zukunft der Informationsfreiheit ist digital

Runder Tisch der G7-Datenschutzbehörden beschließt Erklärung zur Förderung von Innovation und Kinderschutz durch Datenschutz

Runder Tisch der G7-Datenschutzbehörden beschließt Erklärung zur Förderung von Innovation und Kinderschutz durch Datenschutz

Motion of appreciation regarding the ban of TikTok.

"The motion is considered unnecessary by the government, as the legal protections it calls for are already in place." Specifically, the GDPR (General Data Protection Regulation).…

Status update on the Central Archive for Special Legal Proceedings (CABR).

The letter from the Dutch Parliament regarding the "Current Status of the Central Archive for Special Legal Proceedings (CABR)" (May 27, 2025), including the response from the…

Report from a written consultation regarding...

Normally, I rarely draw attention to reports from written consultations in the House of Representatives, but this report deserves special attention: "Report on a written…

Additional information following the debate on the law introducing the Citizen Service Number (BSN) and the digital government infrastructure (DIGG).

House of Representatives letter providing "Additional information following the debate on the law introducing the BSN [citizen service number] and digital government services for…

Amendment of the Law on DNA testing for convicted individuals and the Code of Criminal Procedure, concerning the introduction of precautionary collection of cell samples and several other amendments related to DNA testing.

A bill has been submitted to amend the Law on DNA testing for convicted individuals and the Code of Criminal Procedure, concerning the introduction of precautionary collection of…

Facilitating web harvesting.

Report: "Facilitating Web Harvesting," which covers the processes of "harvesting/crawling, acquiring, preserving, and making accessible (presenting via a reader terminal) the…

Answers to questions regarding the third evaluation of the Biometrics Act in the context of immigration procedures.

Letter from the Parliament, "Answers to questions regarding the third evaluation of the Biometrics Act in the context of immigration procedures" (May 14, 2025).

Answers to questions regarding the third evaluation of the Biometrics in the Aliens Chain Act ⇄

Letter to Parliament, 'Answers to questions regarding the third evaluation of the Biometrics in the Aliens Chain Act' (14 May 2025).

Amendment of the DNA Research (Convicted Persons) Act and the Code of Criminal Procedure in connection with the introduction of conservatory sampling of cellular material and several other amendments regarding DNA research ⇄

The amendment of the DNA Research (Convicted Persons) Act and the Code of Criminal Procedure in connection with the introduction of conservatory sampling of cellular material and…

Additional information following the debate on the Act on the introduction of the BSN and digital government facilities BES ⇄

Parliamentary letter 'Additional information following the debate on the Act on the introduction of the BSN and digital government facilities BES' (19 May 2025). Including an…

Report of a written consultation on ⇄

Normally, I rarely draw attention to reports of written consultations in the House of Representatives, but this report deserves special attention: 'Report of a written…

Status of the Central Archive for Special Jurisdiction (CABR) ⇄

The letter to Parliament concerning the 'Status of the Central Archive for Special Jurisdiction (CABR)' (27 May 2025), including the Response of the AP to the request for advice…

assessment of the motion to ban TikTok ⇄

stated; 'The motion is deemed redundant by the cabinet as the legal protection it calls for is already provided.' Namely, the GDPR.

Facilitating web harvesting ⇄

Report 'Facilitating web harvesting', or 'harvesting/crawling, acquiring, preserving and making accessible (presenting via a reading terminal) of the Dutch web domain, both in its…

WhatsApp is getting ads using personal data from Instagram and Facebook

Forced Consent & Consent Bypass Meta announced today that it also wants to introduce ads on WhatsApp, which will be based on personal data from Facebook and Instagram. This…

CRIF has a ‘score’ for almost everyone in Austria. noyb needs support for a potential class action lawsuit

Credit Scoring The credit agency CRIF collects personal data from millions of people in Austria and assesses their creditworthiness with a score between 250 and 700. For most…

BfDI verhängt Geldbußen gegen Vodafone

BfDI verhängt Geldbußen gegen Vodafone

Meta AI: German Court did not grant interim injunction. Final decision will be taken in main procedure. German DPAs issued urgency procedure.

Artificial Intelligence Today, a German Region Court in Cologne had to decide on an interim injunction against Meta. The German Consumer Rights Organisation "Verbraucherzentrale…

EU to make GDPR procedures unworkable

National Administrative Procedures and DPA inactivity The EU’s trilogue negotiations for a Procedural Regulation that should harmonise and accelerate enforcement of the General…

Berlin Group legt Arbeitspapier mit Empfehlungen zu Neurotechnologien vor

Berlin Group legt Arbeitspapier mit Empfehlungen zu Neurotechnologien vor

Tax Omnibus Bill 2026.

Document II 36735, number 3 (Tax Omnibus Bill 2026), see in particular paragraph 6, which contains the data protection provisions specifically related to the "Compensation for…

Second revised amendment proposed by members Claassen and De Korte, to replace item 34, regarding an opt-out option for the processing of patient medical data.

Chamber Documents II 36278, No. 37, (Amendment to the Act on Quality, Complaints, and Disputes in Healthcare, concerning the regulation of quality registration in healthcare and…

Law on Political Parties.

Chamber Documents II, 36742, No. 3. Rules concerning the financing of political parties and transparency regulations regarding their internal organization and finances, as well as…

related to the introduction of the electronic system.

Document II 36743, number 3 - Amendment to Book 8 of the Dutch Civil Code regarding the introduction of the electronic bill of lading. Section 3.6 discusses the implications of…

"They avoid taking initiative out of fear of making mistakes." (p. 2)

Ministry of Health, Welfare and Sport, Social Domain Oversight: "Improved data processing and reporting within the social domain is essential. Looking back on the 2021-2024…

Digitalization update letter, May 2025.

Brief from the government, a digital transformation update for May 2025, containing a comprehensive overview of progress and commitments made by the Minister of Internal Affairs…

Government-wide position on the use of generative AI.

A government-wide position paper on the use of generative AI and a government-wide guidance document on generative AI were also recently published.

Final report on the implementation of the LAA (National Approach to Address Quality) assessment.

Final report on the implementation of the LAA (National Approach to Address Quality). Don't let the dull-sounding name deter you from taking a look at this report. Improving…

Revised strategy for the National Steering Group of Intervention Teams.

Brief from the government, May 19, 2025: The national steering group for intervention teams is being reorganized and will henceforth be known as the "National Collaboration…

Government-wide position on the deployment of generative AI ⇄

The Government-wide position on the deployment of generative AI and the Government-wide guideline for Generative AI have also been recently published.

Tax Omnibus Act 2026 ⇄

Parliamentary documents II 36735, no. 3 (Tax Omnibus Act 2026), see inter alia paragraph 6, which contains the data protection law section specifically concerning the 'Survivors'…

Political Parties Act ⇄

Parliamentary Papers II, 36742, no. 3. Rules concerning the financing of political parties and transparency rules regarding their internal organization and finances, as well as…

connection with the introduction of the electronic ⇄

Parliamentary Papers II 36743, no. 3 - Amendment of Book 8 of the Civil Code in connection with the introduction of the electronic bill of lading. Paragraph 3.6 discusses the…

hesitancy due to fear of making mistakes." (p. 2) ⇄

Ministry of Health, Welfare and Sport, Social Domain Supervision, Collaboration and signaling within the social domain must improve, Review of Multi-Year Program 2021-2024.…

Evaluation Report on the Once-Only Principle Act ⇄

Evaluation report on the Once-Only Principle Act.

Final Report Implementation Test LAA (National Approach to Address Quality). ⇄

Final Report Implementation Test LAA (National Approach to Address Quality). Do not let the dull title be a reason not to examine the report. Part of the approach to improve…

Collective letter on digitalization May 2025 ⇄

Government letter, Collective letter on digitalization May 2025, containing a wide array of 'status updates' and commitments by the State Secretary for the Ministry of the…

Renewed course of the National Steering Group for Intervention Teams ⇄

noyb sends Meta 'cease and desist' letter over AI training. European Class Action as potential next step

Forced Consent & Consent Bypass Meta has announced it will use EU personal data from Instagram and Facebook users to train its new AI systems from 27 May onwards. Instead of…

Verbraucherzentrale NRW requests Meta to cease and desist AI training in the EU

Forced Consent & Consent Bypass On 14 April, Meta announced that it would use the personal data of European users for artificial intelligence (AI) training in the future. Starting…

Like to play alone? Ubisoft is still watching you!

Online & Mobile tracking Today, noyb filed a complaint against the French video game developer and publisher Ubisoft (known for Assassins Creed, Far Cry, Prince of Persia). The…

The discussion focuses on the challenges of scaling up (phase II/II).

Staffing expansion strategy presentation, for the information of the Ministry of Defence - see page 31 of the presentation "It is essential that the (interpretation) of the legal…

Law on the quality registration of healthcare services.

Amendment to the Act on Quality, Complaints, and Disputes in Healthcare, concerning the regulation of oversight of quality registrations in healthcare and the legal basis for…

Healthcare Quality Registrations Act ⇄

Amendment of the Healthcare Quality, Complaints and Disputes Act in connection with the regulation of control over quality registrations in healthcare and the legal grounds for…

Response to questions from member Koekkoek regarding digital locks in student housing ⇄

discussion is raised regarding the realization of scaling up (II/II) ⇄

Personnel scaling strategy presentation in connection with Defence - see p.

hier het jaarverslag

Wilt u weten hoeveel AVG verzoeken er zijn geweest bij de Inspectie van het Onderwijs? in 2024 15 stuks. Zie hier het jaarverslag (blz.

Decision memo regarding Parliamentary letter on Data breach in published documents of the Central Government ⇄

EU pledged to improve GDPR cooperation - and made it worse

National Administrative Procedures and DPA inactivity As of 2018, the GDPR is supposed to ensure that Europeans enjoy privacy rights throughout the entire EU. However, when…

BfDI steht für die Bündelung der Aufsicht zur Verfügung

BfDI steht für die Bündelung der Aufsicht zur Verfügung

BfDI stellt 33. Tätigkeitsbericht vor

BfDI stellt 33. Tätigkeitsbericht vor

Ministerial Steering Group on Business Climate, Regulatory Burden, and Feasibility.

Ministerial Steering Group on Business Climate, Regulatory Burden, and Feasibility. This group also considers the General Data Protection Regulation (GDPR). KPMG has also produced…

Monitoring of appropriate education in vocational secondary education. Measurement in 2024.

The report "Monitoring of Inclusive Education in Vocational Education - Measurement 2024" also provides several examples that demonstrate that teachers and institutions alike…

Initiative proposal by members Ceder and Six Dijkstra regarding children's rights online.

House of Representatives Documents II 2024–2025, 36 719, no. 2: Initiative note from members Ceder and Six Dijkstra regarding online children's rights. Three specific proposals…

Please note that this is not about opting out of the European Health Data Space (EHDS) itself, but rather about the opt-out mechanism that is provided for within the EHDS.

Concise government statement, opt-out from the European Health Data Space (EHDS) and other commitments. Please note that this is not an opt-out from the EHDS itself, but rather an…

Monitor tailored education MBO. 2024 Measurement ⇄

In the report "Monitor tailored education MBO. 2024 Measurement", several examples are provided showing that teachers among themselves, and institutions among themselves,…

Initiative memorandum from members Ceder and Six Dijkstra on online children's rights. ⇄

Parliamentary Papers II 2024–2025, 36 719, no. 2 Initiative memorandum from members Ceder and Six Dijkstra on online children's rights. Three specific proposals draw attention:…

Ministeriële Stuurgroep Ondernemingsklimaat, Regeldruk en Uitvoerbaarheid

Ministeriële Stuurgroep Ondernemingsklimaat, Regeldruk en Uitvoerbaarheid. Hierin wordt ook de Algemene verordening gegevensbescherming (AVG) meegenomen. KPMG heeft ook meerdere…