noyb.eu’s Post

🎉 noyb win: A Spanish court has ordered the country's DPA to finally act on a complaint against facial recognition company Clearview. The DPA had previously claimed that it isn't competent, despite other EU authorities already having imposed multi-million euro fines against the company. 📝 Full summary here:

🎥 Interested in the current status of the #GDPR Procedural Regulation? We have recorded an in-depth video analysing what the European Parliament and the Council have planned. 🚨 Watch the full video here:

👉 noyb's Consent Banner Report compares the findings of the EDPB's cookie banner taskforce with the positions of national DPAs! https://lnkd.in/d37pBPxZ 👉 We believe that this report will be a valuable resource for companies setting up consent banners. In addition, we hope that the report will spark further discussion about how we can ensure that useres have a fair and free choice in consent banners. 🔽 Below is an overview of the different positions taken by national DPAs compared to the recommendations of the EDPB taskforce:

🍪 In case you missed it: noyb's Consent Banner Report is out now! 🍪 👉 We have compared the findings of the EDPB's Cookie Banner Taskforce with the positions taken by national DPAs in guidance documents and actual decisions. We belive that this can be a helpful resource for companies implementing consent banners. 👉 In addition, we hope that the report will spark further discussion about the guidelines adopted on deceptive practices, and how they can be developed in the future to ensure that users have a fair and free choice when it comes to consent banners. 🍪 For more details, read the full report below or visit our website: https://lnkd.in/d37pBPxZ

🎉 OUT NOW: noyb's Consent Banner Report! 🎉 👉 We have compared the findings of the EDPB's Cookie Banner Taskforce with the positions taken by national DPAs in guidance documents and actual decisions. Some takaways: 1️⃣ Almost all authorities agree: If there is an "accept cookies" option, there needs to be a "reject" option on the same layer of the consent banner. 2️⃣ Pre-ticked check-boxes are not permissible. 3️⃣ Consent is mandatory for cookies that are not "strictly necessary". 👉 We believe that this report will be a valuable resource for companies setting up consent banners. 👉 In addition, we hope that the report will spark further discussion about the guidelines adopted on deceptive practices, and how they can be developed in the future to ensure that users have a fair and free choice when it comes to consent banners.

👉 In case you missed it: Yesterday we filed a complaint against Microsoft subsidiary Xandr! 📰 Read The Register's coverage of the case here:

📰 "Microsoft-owned adtech Xandr accused of EU privacy breaches" - Techcrunch on noyb's complaint against Xandr

🚨 noyb has filed a complaint against the advertising broker Xandr (a Microsoft subsidiary)! 👉 Xandr collects and shares the personal data of millions of Europeans for detailed targeted advertising. This allows the company to auction off advertising space to thousands of advertisers. But: although only one ad is ultimately shown to users, all advertisers receive their data. This may include personal details concerning their health, sexuality or political opinions. 👉 Also, despite selling its service as “targeted”, the company holds rather random information: the complainant apparently is both a man, a woman, employed and unemployed. This could allow Xandr to sell ad space to multiple companies who think that they are targeting a specific group. 👉 As if that were not enough, Xandr reports an astonishing 0% response rate to access and erasure requests in 2022. Xandr even publishes these internal statistics on a hidden website (https://lnkd.in/dGZAJSKv) for everyone to see. 👉 noyb has now filed a GDPR complaint with the Italian data protection authority (Garante) regarding transparency issues, the right of access and the use of inaccurate information about users. Overall, Xandr appears to be in breach of Article 5(1)(c) and (d), Article 12(2), Article 15 and Article 17 of the GDPR.