giropay knows what you bought last summer

The German payment service does not only process payment data, but each item of your shopping basket. They then put the blame for any unlawful data transfers on the shop operators.

UPDATE: CNIL decides EU-US data transfer to Google Analytics illegal

CNIL considers transfer illegal and has ordered the website to comply with the GDPR.

Data Protection Day: 41 Years of "Compliance on Paper"?!

The GDPR is a strong piece of legislation with, so far, weak enforcement. In an overview of our complaints since 2018, noyb wants to show how that lack of enforcement manifests in individual cases.

Data breach in Malta: 65.000 € fine for C-Planet

IT company illegally collected data on 98% of Maltese voters, including their political preferences.

EDPS sanctions Parliament over EU-US Data Transfers to Google and Stripe

The EDPS issued a decision confirming that the European Parliament violated EU data protection law on its COVID website by setting Google and Stripe cookies, among other violations.

GDPR complaint: Airbnb hosts at the mercy of algorithms

Complaint against Airbnb: The online market place for vacation rentals downgraded the complainant’s rating as a host, solely through automated decision making.

Complaint filed: Help! My recruiter is an algorithm!

noyb has filed a complaint against Amazon because of their dubious e-recruiting practices on their Mechanical Turk platform. Amazon uses automated decision-making to accept or reject workers.

Third noyb "Advent Reading" from Facebook/DPC Documents

In our third advent reading we dive into Facebook's "Record of Processing Activities" and why it is a (bad) joke at best.

4th Advent Reading: Facebook fully ignores "Schrems" rulings by Court of Justice

In today's Advent Reading, we will discussFacebook's 86 page "Transfer Impact Assessment" that ignores two CJEU rulings.

Second noyb "Advent Reading" from Facebook/DPC Documents

In our second Advent Reading, we take a Charles Dickens approach to EDPB documents, showing how the DPC has lobbied the EDPB in Facebook's interest to allow their "GDPR bypass".

First noyb "Advent Reading" from Facebook/DPC Documents

Our First "Advent Reading" focuses on the right to access to documents and Facebook’s attempts to suppress documents and undermined the right to be heard of others.

Irish DPC removes noyb from GDPR procedure - Criminal report filed

DPC demanded noyb to sign an "non-disclosure agreement" benefiting Facebook and the DPC in direct exchange for granting noyb procedural rights. We now filed a corruption report.

Want your Grindr data? Show your ID and take a selfie!

Complaint against Grindr: in order for users to access their data, Grindr requires users to identify in maybe the most grotesque way imaginable:

"Black box" Amazon: algorithm discriminates customers

Another complaint against Amazon Europe: a customer made an access request to find out why he was denied certain payment options; he did not receive a reply.

Illegal credit scores: noyb to amplify pressure

Diverting direct marketing data to assess creditworthiness is illegal and needs to stop. noyb filed a complaint against CRIF Bürgel and Acxiom who have been engaging in such practices.

DPC "requires" noyb to take down documents from website

We have invited the DPC to continue this debate in courts, as there is no legal basis for censoring a non-profit when criticizing an authority.

Irish DPC greenlights Facebook's "GDPR bypass".

Schrems: “Decision undermines key element of GDPR.”

Statement: DPC issues € 225 million fine on WhatsApp

First Statement by Max Schrems

News Sites: Readers need to "buy back" their own data at an exorbitant price?!

noyb filed complaints against the cookie paywalls of seven major German speaking news websites