How mobile apps illegally share personal data
Some mobile apps share your personal data immediately after they're opened. This isn't compliant with EU privacy laws
Noyb - European Center for Digital Rights is a non-profit organization based in Vienna, Austria.
Visit noyb.eu → On Hacker News Nov 2019 – Jul 2026
Some mobile apps share your personal data immediately after they're opened. This isn't compliant with EU privacy laws
If Instagram and Facebook users want to withdraw their consent, they have to buy an expensive subscription
The comapny uses manipulative designs to prevent people from obtaining a free copy of their data in accordance with law
The Norwegian Data Protection Authority confirmed that Grindr did not receive valid consent from users and announces a fine of 100 Mio NOK (€ 9.63 Mio) on Grindr.
After almost five years, the Irish DPC decided on a noyb complaint and required Facebook, Instagram and WhatsApp to stop using the personal data of users for advertisement in the EU.
The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.
In a groundbreaking decision, the Austrian Data Protection Authority has decided on a model case by noyb that the continuous use of Google Analytics violates the GDPR.
Austrian Supreme Court may refer case to Court of Justice, questioning the basis of Facebook's business model in Europe.
TikTok tracks its users even if they're using other apps. The video platform therefore also knows what dating app you use
The world's largest social network believes it has found a way to bypass Europe’s strict privacy laws.
TeleSign generates a “reputation score” and sells it to various clients. TeleSign secretly received the mobile phone data from BICS, a Belgian company that provides interconnection services
noyb has filed a GDPR complaint regarding transparency issues, the right of access and the use of inaccurate information about users
Today, noyb.eu sent over 500 draft complaints to companies who use unlawful cookie banners - making it the largest wave of complaints since the GDPR came into force.
Facebook must stop further transfers of European personal data to the United States, given that Facebook is subject to US surveillance laws (like FISA 702 and EO 12.333).
Today we filed 422 + 36 complaints on "cookie banners" with ten European Data Protection Authorities.
dict.cc requests users to consent to the tracking by 1,741 "partner" companies. This makes it impossible for people to know what happens to their data
Clearview AI is known for scraping billions of photos of people around the world on the internet – and selling its facial recognition system to law enforcement and state actors
noyb filed a complaint against Mozilla for quietly enabling a supposed “privacy feature” (called Privacy Preserving Attribution) in its Firefox browser which tracks user behaviour on websites.
Trump paralysed the "Privacy and Civil Liberties Oversight Board" (PCLOB), a key element of the EU-US data transfer deal that allows EU-US data flows.
Meta charges up to €251.88 to respect the fundamental right to privacy of EU users. This is a violation of the GDPR
When the GDPR became applicable on 25 May 2018, it was perceived as a watershed moment. The past 4 years have shown that a law alone does not change business models.
In today's decision, the CJEU declared Meta/Facebook's GDPR approach largely illegal - similar to noyb's previous litigation before the EDPB leading to a fine of € 390 million.
More and more websites have added an option to say “no” to cookies and other tracking- as foreseen by the GDPR. Where did this trend come from?
The Data Protection Authority of Lower Saxony (LfD) decided that the “Pay or Okay” solution used by heise.de was unlawful