Data protection and digital regulation developments, collected automatically from 17+ sources.
Get this as an email digestNCTV memorandum on the status of (information) security following ADR investigation "The NCTV processes personal data within the currently applicable frameworks of the GDPR. This,…
Status update from the Tax Authority: In preparation for a parliamentary debate on the Tax Authority (March 13, 2025), a comprehensive set of information has been made public,…
Advice on Data Foundations & Analytics (October 2024) from the Analytics Advisory Committee, which specifically addresses: "The question is whether collecting additional…
Documents related to the decision regarding the disclosure of personal data by the Ministry of Defence to trade unions during reorganizations.
One of the use cases aims to: "Scale up the use of drone operations for surveillance and incident response, with the goal of increasing the speed, safety, and efficiency of…
Report on the Risk Analysis Model (RAM) at the Dutch Tax Administration, Benefits Administration, and Customs (Part 2) "This is the second part of the report concerning the…
Parliamentary letter regarding the appreciation of the motion by member Six Dijkstra on investigating the local operation of AI models within the government "I endorse the…
Amendment Act on the restriction of access to UBO registers, Parliamentary Papers II 2024-25, no. 36584 nos.
Op 16 april 2024 heeft de Kamer moties aangenomen waarin de regering wordt verzocht om meer hulp en ondersteuning te bieden aan geadopteerden en om ervoor te zorgen dat…
One of the use cases has the objective: "Scaling up the deployment of drone operations for surveillance and incidents, with the aim of increasing the speed, safety, and efficiency…
The implementation of the legislative amendment varied significantly between organizations, with complexity primarily depending on existing reporting facilities and the need for…
Review of systems comparable to RAM "This report inventories the extent to which there is insight into whether systems of the Tax and Customs Administration that are comparable to…
Outcomes of External investigation into the Risk Analysis Model (RAM) at the Tax and Customs Administration, the Benefits Service and Customs. Report on the investigation of the…
Data Foundations & Analytics Advice (Oct. 2024) from the Analytics Advisory Committee, which explicitly addressed: "The question is whether collecting additional (special…
State of affairs regarding the Tax and Customs Administration. In preparation for a committee debate concerning the Tax and Customs Administration (13 March 2025), a series of…
Data Subject Rights Nowadays, more and more banks set their interest rates automatically, and without any human intervention. But even the smallest inaccuracies can cost consumers…
Response to parliamentary questions regarding the sharing of personal data through the use of Google Analytics on werkenvoornederland.nl and specific application procedures. The…
Parliamentary Papers II 2024-2025, 36663, no. 7. Letter from the temporary Committee on Fundamental Rights and Constitutional Review regarding an advisory report on the…
Kamerstukken II 2024-2025, 35968, nr. 30, (Intrekking van de Archiefwet 1995 en vervanging door een nieuwe Archiefwet (Archiefwet 20..)), Nader gewijzigd amendement van de leden…
Parliamentary Papers II 2024-2025, 36584, 18 (Amendment Act on limiting access to UBO registers), Motion by Member Flach et al.
Parliamentary Papers II, 2024-2025, 23 645, no.
Government-wide GDPR audit 2024.
The launch of a register for Data Protection Officers. "To strengthen the position of the data protection officer (DPO) and to ensure quality, [as was also announced in the…
Political Microtargeting, Manipulation & Tracking In March 2023, noyb filed complaints against several German political parties: During the 2021 elections, CDU, AfD, SPD, Bündnis…
Data Subject Rights The highly popular smartphone app WetterOnline shares the personal data of its users with hundreds of third-party companies for advertising purposes. Until a…
Parliamentary Papers II 2024-2025, 35968, no. 24 - Repeal of the Public Records Act 1995 and replacement by a new Public Records Act (Public Records Act 20..), Amended amendment…
Cabinet response to the report 'Ethnic profiling is a government-wide problem' by Amnesty International.
Uitkomst verkenning iedere 18-jarige standaard een vergeetrecht. Halverwege november 2024 werd een motie aangenomen om te verkennen op welke manier het recht op gegevensverwerking…
National Administrative Procedures and DPA inactivity Today, the EU's General Court held that the Irish DPC acted unlawful when it refused to investigate a noyb complaint. The…
National Administrative Procedures and DPA inactivity When the General Data Protection Regulation (GDPR) came into force in 2018, it ushered in a new era of data protection in the…
Data Transfers Since the Snowden disclosures we know that the US engages in mass surveillance of EU users by scooping up personal data from US Big Tech. The "Privacy and Civil…
EDSA schafft mehr Klarheit bei Pseudonymisierung
Data Transfers Today, noyb has filed GDPR complaints against TikTok, AliExpress, SHEIN, Temu, WeChat and Xiaomi for unlawful data transfers to China. While four of them openly…
In the judgment C-416/23, the Austrian Data Protection Authority (DSB) received a slap in the face from the CJEU. The authority has – arbitrarily – set the number of complaints…
Berlin Group beschließt Papiere zu LLMs und zu Data Sharing
Biometric Data Today, noyb filed a GDPR complaint against Ryanair. Booking a flight on the airline’s website not only requires a mandatory account. New customers must also go…
Data Subject Rights noyb has achieved a win against Netflix. Almost five years after the complaint has been filed, the Dutch data protection authority (DPA) has finally issued a…
Datenschutz ermöglicht verantwortungsvolle KI
Political Microtargeting, Manipulation & Tracking noyb win against the European Commission: The EDPS (European Data Protection Supervisor) has issued a decision finding that the…
Forced Consent & Consent Bypass Today, noyb has filed a complaint against the social media platform BeReal over the latest “dark pattern” to get consent. When people open the app,…
Data Subject Rights noyb is now approved as a so-called "Qualified Entity" to bring collective redress actions in courts throughout the European Union. Such action under Directive…
Data Subject Rights noyb welcomes yesterday's leading decision of the German Federal Court of Justice on claims in connection with a data protection incident at Facebook Copyright…
Forced Consent & Consent Bypass In the battle over the illegal use of personal data for advertisement, Meta has announced another variation that is not "Yes or No" consent: This…
Global Privacy Assembly beschließt Resolution für vertrauenswürdigen internationalen Datenverkehr
Online & Mobile tracking Today, noyb filed a complaint against the social media platform Pinterest. Most users probably know it as a visual mood board and use it to find ideas and…
BfDI bei G7 Roundtable in Rom
BfDI begrüßt EDSA-Leitlinien zum berechtigten Interesse
Online & Mobile tracking In today's ruling in C-446/21 (Schrems v. Meta), the Court of Justice of the European Union (CJEU) has fully backed a lawsuit brought against Meta over…
BfDI begrüßt BKA-II Entscheidung
Online & Mobile tracking Today, noyb filed a complaint against Mozilla for quietly enabling a supposed “privacy feature” (called Privacy Preserving Attribution) in its Firefox…
Forced Consent & Consent Bypass Following several noyb complaints from 2023, the Belgian data protection authority has ordered four major Belgian news sites to bring their cookie…
Neue BfDI tritt Amt an
Profiling & Automated Decision Making Today, noyb lodged a complaint with the Austrian data protection authority against the credit reference agency KSV1870 and the energy…
Data Security In early May 2024, the European Parliament informed its staff of a massive data breach in the institution’s recruiting platform (called “PEOPLE”). The breach…
Data Subject Rights Greek supermarket chain Alfa Vita (AB) runs a loyalty card program, allowing the collection of personal data of shoppers. Still, the company can’t even comply…
Artificial Intelligence Recently, Twitter International (now re-branded as “X”) began unlawfully using the personal data of more than 60 million users in the EU/EEA to train its…
Data Subject Rights Contrary to EU law, the Swedish Data Protection Authority (IMY) regularly refuses to properly handle complaints from data subjects. Even after a ruling by the…
Forced Consent & Consent Bypass Following a complaint by noyb, the Hamburg data protection authority declared the use of controversial ‘Pay or OK’ systems to be permissible.…
In 2023, noyb continued to be one of the major European forces pushing for the fundamental right to data protection for all users. Our achievements this year prove once again that…
The European Parliament and the Council of the EU have now published their amendments to the Commission's draft GDPR procedural regulation. We have analysed the two versions and…
Cookie Banners Following several hundred noyb complaints against companies that use questionable consent banners, the European Data Protection Board established a "cookie banner…
Data Subject Rights Advertising broker Xandr (a Microsoft subsidiary) collects and shares the personal data of millions of Europeans for detailed targeted advertising. This allows…
Online & Mobile tracking Today, a Norwegian court has confirmed that Grindr violated the GDPR by sharing user data with advertisers. This also confirms that Grindr must pay a fine…
Artificial Intelligence In response to 11 noyb complaints, the DPC has announced (late Friday afternoon) that Meta has committed to the DPC that it will not process EU/EEA user…
Forced Consent & Consent Bypass After years of growing criticism over invasive ad tracking, Google announced in September 2023 that it would phase out third-party cookies from its…
Berlin Group beschließt Arbeitspapier zu Digitalem Zentralbankgeld
BfDI und ICO stärken Zusammenarbeit
Artificial Intelligence Over the past few days, Meta has informed millions of Europeans that its privacy policy is changing once again. Only on closer inspection of the links in…
BfDI fordert ein Update bei der Informationsfreiheit
Forced Consent & Consent Bypass noyb has today lodged a GDPR complaint against Kurier. Just a few months ago, users were forced to consent to Google and other tracking cookies…
Berlin Group beschließt Arbeitspapier zu Facial Recognition Technology
Data Subject Rights In the wake of the pandemic, schools in the European Union have increasingly begun to implement digital services for online learning. While these modernisation…
BfDI erhebt Klage gegen den Bundesnachrichtendienst
Artificial Intelligence In the EU, the GDPR requires that information about individuals is accurate and that they have full access to the information stored, as well as…
Online Advertising CJEU press releases (look for C-446/21 - Schrems)Full AG OpinionKatharina Raabe-Stuppnig, lawyer representing Mr Schrems: "We are very pleased by the opinion,…
Bilaterales Treffen zwischen BfDI und Garante
Forced Consent & Consent Bypass Today, the EDPB has issued its first decision on "Pay or Okay" in relation to large online platforms such as Instagram and Facebook, as first…
Forced Consent & Consent Bypass So-called pay or consent systems are on the rise in Europe. First introduced by journalistic websites that were suffering from the loss of…
BfDI stellt 32. Tätigkeitsbericht vor
Forced Consent & Consent Bypass The European Data Protection Board (EDPB) will soon decide about the future of free consent online. Following Meta’s introduction of a “Pay or…
National Administrative Procedures and DPA inactivity Would you like a license to break the law? Sweden may be your dream destination: Thanks to a loophole in national law, large…
BfDI begrüßt die europäische KI-Verordnung
Credit Scoring Today, noyb has filed a complaint and report against the German credit agency SCHUFA with the Hessian data protection authority. The company appears to be making…
Forced Consent & Consent Bypass The European Data Protection Board (EDPB) will soon issue what is likely to be its most significant opinion to date: It will determine whether…
BfDI fordert Einhaltung der Grundrechte bei Chatkontrolle
Credit Scoring noyb has scored a stage victory in its proceedings against the credit reference agency CRIF and the address trader Acxiom in Germany. The companies are illegally…
When the GDPR came into force in 2018, the new and shiny data protection law was hailed as a shift towards stricter enforcement – ensuring that in the EU, the fundamental right to…
Forced Consent & Consent Bypass Since the beginning of November, Instagram and Facebook users who don’t want to be tracked have to pay a “privacy fee” of up to € 251.88 per year.…
Credit Scoring Today, noyb filed a complaint and report against the creditors’ association KSV1870 with the Austrian data protection authority. Although Article 15 GDPR stipulates…
BfDI für freie und vertrauenswürdige globale Datenverkehre
Political Microtargeting, Manipulation & Tracking Today, noyb filed a complaint against X (Twitter) for unlawfully using the political views and religious beliefs of its users for…
Credit Scoring Note: The judgments are not connected to noyb cases CJEU landmark rulings on “credit ranking” and review of DPAs The European Court of Justice (CJEU) today issued…
Credit Scoring noyb has filed a lawsuit against the credit reference agency CRIF GmbH and the address trader AZ Direct. The companies secretly trade the address data of almost…
Forced Consent & Consent Bypass Today, noyb filed a complaint against Meta with the Austrian data protection authority. European users now have the “choice” to either consent to…
BfDI kritisiert Nachrichtendienstgesetze
Political Microtargeting, Manipulation & Tracking noyb files complaint against EU Commission over targeted chat control ad campaign Today, noyb filed a complaint against the EU…
IFK fordert einheitlich hohes Transparenzniveau in Bund und Ländern
Credit Scoring Address trader sues German DPA to prevent noyb from accessing files Two years ago, noyb filed a complaint against the address trader Acxiom and the credit reference…
BfDI kritisiert Entwurf des Finanzkriminalitätsbekämpfungsgesetzes
Berlin Group beschließt Arbeitspapier zu Telemetrie
Data Subject Rights Streaming service DAZN took almost five years to answer a simple access request In January 2019, noyb filed two complaints against the streaming service DAZN…
Forced Consent & Consent Bypass Meta (Facebook / Instagram) to move to a "Pay for your Rights" approach The Wall Street Journal reported that Meta plans to move to a "Pay for your…
Online & Mobile tracking € 5,8 million fine for Grindr – appeal by Grindr failed In 2020, the Norwegian Consumer Council (NCC) filed a complaint to the Norwegian Data Protection…
BfDI kritisiert Gesetz zum Einsatz automatisierter Systeme bei der FIU
BfDI für effektivere Regeln zur Durchsetzung der DSGVO bei grenzüberschreitenden Sachverhalten
Forced Consent & Consent Bypass Today, noyb filed three complaints in France against Fnac (the largest electronics store in France), the real estate app SeLoger and the fitness…
Berlin Group beschließt Arbeitspapier zu “Smart Cities"
Forced Consent & Consent Bypass Today, noyb filed three complaints against Fitbit in Austria, the Netherlands and in Italy. The popular health and fitness company, acquired by…
Annual Report 2022 In 2022, noyb continued its longstanding fight for users’ right to privacy. Although the GDPR always foresaw a strong role for non-profits in this regard, we…