noyb.eu

noyb has scored another win in its proceedings against Microsoft 365 Education: The Austrian data protection authority (DSB) has decided that the company illegally installed cookies on the devices of a pupil without consent. According to Microsoft’s own documentation, these cookies analyse user behaviour, collect browser data and are used for advertising. Microsoft now has four weeks to comply and cease the use of tracking cookies.

In June 2024, the rights group noyb had filed two complaints concerning Microsoft 365 Education in schools with the Austrian DSB ["Datenschutzbehörde"]. The first complaint was decided in October 2025. Back then, the DSB held that Microsoft violated the right of access under Article 15 GDPR. The second complaint, which has now been decided, concerned the use of unlawful tracking cookies in Microsoft 365 Education.

TikTok not only tracks its users while they are using the TikTok app itself, but it is increasingly integrated with many other websites and apps. For example, TikTok was able to track a person’s Grindr usage on his smartphone. However, that’s not all: In addition to tracking users across the digital space, TikTok also refuses to provide an interested users with a copy of all of their personal data. Therefore, noyb has filed two complaints against TikTok and its data-sharing partners AppsFlyer and Grindr.

TikTok not only tracks its users while they are using the TikTok app itself, but it is increasingly integrated with many other websites and apps. For example, TikTok was able to track a person’s Grindr usage on his smartphone. However, that’s not all: In addition to tracking users across the digital space, TikTok also refuses to provide an interested users with a copy of all of their personal data. Therefore, noyb has filed two complaints against TikTok and its data-sharing partners AppsFlyer and Grindr.

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission’s official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission’s official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission’s official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission’s official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Despite heavy criticism from civil society and large parts of the EU Parliament, the EU Commission has now published its proposal for the “Digital Omnibus”. Contrary to the Commission’s official press release, these changes are not “maintaining the highest level of personal data protection”, but massively lower protections for Europeans. While having basically no real benefit for average European small and medium businesses, the proposed changes are a gift to US big tech as they open up many new loopholes for their law departments to exploit. Schrems: “This is the biggest attack on European’s digital rights in years. When the Commission states that it ‘maintains the highest standards’, it clearly is incorrect. It proposes to undermine these standards.”

Consent to use of your data for AI training is non-optional! This is progress, we have declared! You don’t want to stand in the way of progress, do you?

Cross-post da: https://lemmy.ml/post/38783194

As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts become reality, this would have significant impact on people’s fundamental right to privacy and data protection. The reform would be part of the so-called “Digital Omnibus” which was supposed to only bring targeted adjustments to simplify compliance for businesses. Now, the Commission proposes changes to core elements like the definition of “personal data” and all data subject’s rights under the GDPR. The leaked draft also suggests to give AI companies (like Google, Meta or OpenAI) a blank check to suck up European’s personal data. In addition, the special protection of sensitive data like health data, political views or sexual orientation would be significantly reduced. Also, remote access to personal data on PCs or smart phones without consent of the user would be enabled. Many elements of the envisaged reform would overturn CJEU case law, violate European Conventions and the European Charter of Fundamental Rights. If this extreme draft will become the official position of the European Commission, will only become clear on 19 November, when the “Digital Omnibus” will be officially presented. Schrems: “This would be a massive downgrading of European’s privacy ten years after the GDPR was adopted.”

As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts become reality, this would have significant impact on people’s fundamental right to privacy and data protection. The reform would be part of the so-called “Digital Omnibus” which was supposed to only bring targeted adjustments to simplify compliance for businesses. Now, the Commission proposes changes to core elements like the definition of “personal data” and all data subject’s rights under the GDPR. The leaked draft also suggests to give AI companies (like Google, Meta or OpenAI) a blank check to suck up European’s personal data. In addition, the special protection of sensitive data like health data, political views or sexual orientation would be significantly reduced. Also, remote access to personal data on PCs or smart phones without consent of the user would be enabled. Many elements of the envisaged reform would overturn CJEU case law, violate European Conventions and the European Charter of Fundamental Rights. If this extreme draft will become the official position of the European Commission, will only become clear on 19 November, when the “Digital Omnibus” will be officially presented. Schrems: “This would be a massive downgrading of European’s privacy ten years after the GDPR was adopted.”

The EU Commission has secretly set in motion a potentially massive reform of the GDPR. noybs first overview of the proposed changes.

The EU Commission has secretly set in motion a potentially massive reform of the GDPR. noybs first overview of the proposed changes.

The EU Commission has secretly set in motion a potentially massive reform of the GDPR. noybs first overview of the proposed changes.

As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts become reality, this would have significant impact on people’s fundamental right to privacy and data protection. The reform would be part of the so-called “Digital Omnibus” which was supposed to only bring targeted adjustments to simplify compliance for businesses. Now, the Commission proposes changes to core elements like the definition of “personal data” and all data subject’s rights under the GDPR. The leaked draft also suggests to give AI companies (like Google, Meta or OpenAI) a blank check to suck up European’s personal data. In addition, the special protection of sensitive data like health data, political views or sexual orientation would be significantly reduced. Also, remote access to personal data on PCs or smart phones without consent of the user would be enabled. Many elements of the envisaged reform would overturn CJEU case law, violate European Conventions and the European Charter of Fundamental Rights. If this extreme draft will become the official position of the European Commission, will only become clear on 19 November, when the “Digital Omnibus” will be officially presented. Schrems: “This would be a massive downgrading of European’s privacy ten years after the GDPR was adopted.”

As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts become reality, this would have significant impact on people’s fundamental right to privacy and data protection. The reform would be part of the so-called “Digital Omnibus” which was supposed to only bring targeted adjustments to simplify compliance for businesses. Now, the Commission proposes changes to core elements like the definition of “personal data” and all data subject’s rights under the GDPR. The leaked draft also suggests to give AI companies (like Google, Meta or OpenAI) a blank check to suck up European’s personal data. In addition, the special protection of sensitive data like health data, political views or sexual orientation would be significantly reduced. Also, remote access to personal data on PCs or smart phones without consent of the user would be enabled. Many elements of the envisaged reform would overturn CJEU case law, violate European Conventions and the European Charter of Fundamental Rights. If this extreme draft will become the official position of the European Commission, will only become clear on 19 November, when the “Digital Omnibus” will be officially presented. Schrems: “This would be a massive downgrading of European’s privacy ten years after the GDPR was adopted.”

As gradually leaked the last days by various news outlets, the EU Commission has secretly set in motion a potentially massive reform of the GDPR. If internal drafts become reality, this would have significant impact on people’s fundamental right to privacy and data protection. The reform would be part of the so-called “Digital Omnibus” which was supposed to only bring targeted adjustments to simplify compliance for businesses. Now, the Commission proposes changes to core elements like the definition of “personal data” and all data subject’s rights under the GDPR. The leaked draft also suggests to give AI companies (like Google, Meta or OpenAI) a blank check to suck up European’s personal data. In addition, the special protection of sensitive data like health data, political views or sexual orientation would be significantly reduced. Also, remote access to personal data on PCs or smart phones without consent of the user would be enabled. Many elements of the envisaged reform would overturn CJEU case law, violate European Conventions and the European Charter of Fundamental Rights. If this extreme draft will become the official position of the European Commission, will only become clear on 19 November, when the “Digital Omnibus” will be officially presented. Schrems: “This would be a massive downgrading of European’s privacy ten years after the GDPR was adopted.”

Lithuania-based Whitebridge AI sells “reputation reports” on everyone with an online presence. These reports compile large amounts of scraped personal information about unsuspecting people, which is then sold to anyone willing to pay for it. Some data is not factual, but AI generated and includes suggested conversation topics, a list of alleged personality traits and a background check to see if you have shared adult, political, or religious content. Despite the legal right of free access to your own data, Whitebridge.ai only sells “reports” to the affected people. It seems the business model is largely based on scared users that want to review their own data that was previously unlawfully compiled. noyb has now filed a complaint with the Lithuanian DPA.

[...]

[...]

[...]

Bumble sends people's personal profile information to OpenAI to create AI generated messages - without ever asking for consent

Meta ha anunciado hoy que también quiere introducir anuncios en WhatsApp, que se basarán en datos personales de Facebook e Instagram. Esto integra aún más WhatsApp en otros servicios de Meta, una app originalmente independiente, que inicialmente estaba disponible por solo 1 dólar al año sin anuncios ni uso de datos. Esto también significa que Meta consolida su monopolio de las redes sociales. En realidad, la legislación de la UE debía impedirlo.