Privacy watchdog noyb reports major victories in 2023 annual report

On July 29, 2024, the European privacy watchdog noyb (None Of Your Business) released its Annual Report for 2023, detailing a year of significant achievements in enforcing data protection rights across Europe. The report, published nearly seven months after the end of the year it covers, outlines how noyb filed over 40 new complaints and saw major decisions resulting in substantial fines against several tech companies.

According to the report, noyb's efforts in 2023 led to unprecedented financial penalties for privacy violations. In January 2023, the Irish Data Protection Commission (DPC) ordered Meta, the parent company of Facebook and Instagram, to pay €390 million for breaches of the General Data Protection Regulation (GDPR). This was followed by an even larger fine of €1.2 billion imposed on Meta in May 2023, along with an order to cease transferring European users' personal data to the United States.

The organization's impact extended beyond Meta. In June 2023, the Swedish Data Protection Authority fined Spotify 58 million Swedish Krona (approximately €5 million) for failing to fully comply with a user's data access request. That same month, the French data protection authority CNIL levied a €40 million fine against Criteo, a major European online advertising company, for violating data subject rights and failing to demonstrate valid consent for data processing.

noyb's influence was further demonstrated when the Swedish Data Protection Authority issued the first significant fine for the use of Google Analytics in July 2023, marking a pivotal moment in the enforcement of data transfer regulations.

The report highlights noyb's proactive approach to emerging privacy issues. In November 2023, the organization filed its first two complaints against Meta's new "Pay or Okay" system, which charges users a monthly fee if they refuse to consent to personalized advertising tracking. This action reflects noyb's commitment to challenging new business models that potentially infringe on user privacy rights.

noyb's work in 2023 wasn't limited to major tech platforms. The organization expanded its focus to address privacy concerns in various sectors. It intensified efforts against unlawful credit scoring practices, filed complaints regarding political microtargeting on social media platforms, and challenged Fitbit's consent practices for data processing. Additionally, noyb took action against Ryanair's use of facial recognition technology and TeleSign's alleged secret profiling of millions of mobile phone users.

The annual report also sheds light on noyb's financial structure and support base. With over 5,200 supporting members and various institutional backers, the organization emphasized the critical role of public support in enabling its work. This broad base of support allows noyb to maintain its independence and pursue high-impact cases against major corporations and government entities.

Looking ahead, noyb outlined its plans for 2024, indicating a continued focus on strategic litigation and advocacy for stronger enforcement of privacy laws. The organization plans to build on its successes from 2023 by expanding its legal tech initiatives and challenging inactive data protection authorities.

The release of this annual report comes at a time when data protection and privacy issues are increasingly in the spotlight. With the rapid advancement of artificial intelligence and the growing digital economy, the work of organizations like noyb is becoming ever more crucial in safeguarding individual rights in the digital space.

noyb's 2023 Annual Report serves not only as a record of achievements but also as a call to action for continued vigilance in the face of evolving privacy challenges. It underscores the importance of robust, independent oversight in ensuring that both private companies and public institutions adhere to data protection regulations.

As digital technologies continue to permeate every aspect of daily life, the role of privacy advocacy groups like noyb is likely to grow in importance. Their work in holding powerful entities accountable and pushing for stronger enforcement of privacy laws will remain crucial in shaping the future of digital rights and data protection across Europe and beyond.

Key facts from noyb's 2023 Annual Report

Over 40 new privacy complaints filed in 2023

€390 million fine imposed on Meta by Irish DPC in January 2023

€1.2 billion fine against Meta for illegal data transfers to the US in May 2023

Spotify fined approximately €5 million in Sweden for data access violations

€40 million fine against Criteo in France for data rights violations

First major fine issued for use of Google Analytics in Sweden

New complaints filed against Meta's "Pay or Okay" system

Expanded focus on credit scoring, political microtargeting, and mobile data profiling

Over 5,200 supporting members backing noyb's work

Plans for increased legal tech initiatives and challenges to inactive data protection authorities in 2024