Austrian Supreme Court: Meta must give users full access to their data
a day ago
- #Data Privacy
- #GDPR
- #Meta
- Austrian Supreme Court ruled Meta must provide full access to all personal data within 14 days, including sources, recipients, and purposes.
- Meta's claims of trade secrets were rejected, granting unprecedented access to its data processing practices.
- Meta illegally collected data from third-party apps and websites; personalized ads require explicit user consent.
- Sensitive data (e.g., political views, health) must not be processed without a valid legal basis under GDPR Article 9(2).
- Max Schrems awarded €500 in damages after an 11-year legal battle involving multiple courts.
- Meta must disclose all personal data and processing specifics by December 31, 2025.
- Meta's personalized ad model deemed unlawful in the EU without opt-in consent.
- Sensitive data must be segregated and processed separately, even if unintentionally collected.
- €500 damages seen as a realistic claim for GDPR violations by Meta users.
- Case highlights challenges in GDPR enforcement, with prolonged litigation and high costs.