Topic: Subject access request
ECJ rules on right to judicial review of authority decisions
The European Court of Justice has said that actions by regulators that exercise data subjects’ rights on their behalf are subject to judicial review.
17 November 2023
ICO wins Delo appeal
An appeal court has confirmed that the UK data regulator has no obligation to reach a conclusive decision each time it receives a complaint – but the complainant who sparked the case plans to take the fight further.
10 October 2023
Dutch court fines Uber
A court has found that Uber failed to comply with a judgment forcing the company to disclose information on its automated decision-making.
09 October 2023
Fitbit faces illegal data transfers complaint
Noyb has filed complaints against Fitbit in multiple EU countries, accusing the health company of unlawfully transferring customer data to the US.
31 August 2023
Dutch court overturns DPG Media fine
A Dutch appeals court has thrown out a penalty imposed by the data regulator against a company which required users to submit ID documents in order to access their data.
22 August 2023
Romain Robert: the exit interview
Noyb programme director Romain Robert has been a key part of the team that has gone from being known as “privacy fundamentalists” to the “28th data protection authority” over the past five years. At the end of his three-year tenure at the NGO, he tells GDR about what GDPR issues need further work, the state of civil society, and the future of enforcement.
11 August 2023
Delo urges review of ICO decision
A businessman has fought a High Court ruling that upheld the Information Commissioner’s Office refusal to systematically determine whether GDPR breaches have taken place when it receives complaints.
18 July 2023
CNIL slashes Criteo fine by a third
In a decision that may create new audit requirements for French adtech companies, the regulator today fined Criteo €40 million for carrying out targeted advertisement without users’ consent – significantly less than the €60 million fine it proposed imposing in August 2022.
22 June 2023
ECJ rules on access rights
The European Court of Justice has ruled that data subjects have the right to know when and why their data was processed – but stopped short of a blanket allowance on revealing which individuals did the processing.
22 June 2023
Spotify hit with GDPR data subject access fine
Sweden’s data protection authority has issued a 58 million kronor (€5 million) GDPR fine against the music streaming app – four years and a legal battle after noyb lodged its complaint with the regulator.
13 June 2023