Topic: Subject access request

ECJ rules on right to judicial review of authority decisions

The European Court of Justice has said that actions by regulators that exercise data subjects’ rights on their behalf are subject to judicial review.

17 November 2023

ICO wins Delo appeal

An appeal court has confirmed that the UK data regulator has no obligation to reach a conclusive decision each time it receives a complaint – but the complainant who sparked the case plans to take the fight further.

10 October 2023

Dutch court fines Uber

A court has found that Uber failed to comply with a judgment forcing the company to disclose information on its automated decision-making.

09 October 2023

Fitbit faces illegal data transfers complaint

Noyb has filed complaints against Fitbit in multiple EU countries, accusing the health company of unlawfully transferring customer data to the US.

31 August 2023

Dutch court overturns DPG Media fine

A Dutch appeals court has thrown out a penalty imposed by the data regulator against a company which required users to submit ID documents in order to access their data.

22 August 2023

Romain Robert: the exit interview

Noyb programme director Romain Robert has been a key part of the team that has gone from being known as “privacy fundamentalists” to the “28th data protection authority” over the past five years. At the end of his three-year tenure at the NGO, he tells GDR about what GDPR issues need further work, the state of civil society, and the future of enforcement.

11 August 2023

Delo urges review of ICO decision

A businessman has fought a High Court ruling that upheld the Information Commissioner’s Office refusal to systematically determine whether GDPR breaches have taken place when it receives complaints.

18 July 2023

CNIL slashes Criteo fine by a third

In a decision that may create new audit requirements for French adtech companies, the regulator today fined Criteo €40 million for carrying out targeted advertisement without users’ consent – significantly less than the €60 million fine it proposed imposing in August 2022.

22 June 2023

ECJ rules on access rights

The European Court of Justice has ruled that data subjects have the right to know when and why their data was processed – but stopped short of a blanket allowance on revealing which individuals did the processing.

22 June 2023

Spotify hit with GDPR data subject access fine

Sweden’s data protection authority has issued a 58 million kronor (€5 million) GDPR fine against the music streaming app – four years and a legal battle after noyb lodged its complaint with the regulator.

13 June 2023

Unlock unlimited access to all Global Data Review content