The 2025 Annual Report of noyb Presents Its Major Actions in Data Protection

The association None of Your Business (noyb) published its annual report for 2025, detailing its legal actions, policy work, and decisions obtained during the year.

In 2025, the organization initiated preparations for its first class action lawsuit targeting the Austrian rating agency CRIF. It also continued its actions against artificial intelligence systems by filing a second complaint against OpenAI and sending a formal notice letter to Meta regarding the training of its models. At the same time, noyb dedicated resources to policy work by sharing its expertise on the European Commission's "Digital Omnibus Package" legislative package.

The French data protection authority imposed a fine of €325,000,000 on Google for unsolicited emails in its Gmail service.

The company Conde Nast was fined €750,000 for installing cookies without user consent.

The Austrian data protection authority ruled the use of tracking cookies without consent by the Microsoft 365 Education service illegal.

In January 2025, the Court of the European Union ruled that the Irish Data Protection Commission must investigate a complaint filed by noyb against Meta in 2018. This decision follows a dispute where the DPC contested the obligation, highlighted by the European Data Protection Board, to examine the use of sensitive data within the meaning of Article 9 of the GDPR, the Court having rejected the Irish authority's arguments.

In December 2025, the Austrian Supreme Court ordered Meta to disclose all personal data it holds on its users. The company must also provide detailed information about this data, such as its source, recipients, or the purpose of processing, as part of a case initiated by a complainant in 2014.

Informations complémentaires

L’analyse complète est réservée aux membres

Montant de la sanction, thèmes, secteurs, entités et données concernées : l’essai gratuit de 14 jours ouvre la fiche entière et la veille personnalisée.

Essayer gratuitement 14 jours · accès complet · sans carte bancaire