Welcome to the GDPR: Complaints Lobbed at Facebook, Google That Could Carry Billions in Penalties
"None of Your Business," an EU organization headed by Austrian privacy lawyer and activist Max Schrems, has filed four separate complaints against the U.S. tech giants alleging they are forcing users to consent to new privacy policies with an "all or nothing" approach.
May 25, 2018 at 02:49 PM
3 minute read
The original version of this story was published on The Recorder
SAN FRANCISCO — Just after the European Union's General Data Protection Regulation took effect Friday, Austrian privacy lawyer and activist Max Schrems filed a spate of complaints against Facebook and Google alleging they're willfully violating the law and should be fined billions of euros.
The four similar complaints were filed with data privacy regulators in separate EU countries on behalf of users in those jurisdictions. The complaints target the privacy policies of Facebook, WhatsApp, Instagram and Google's Android, and allege that users are being forced to give consent to their data being collected in violation of the GDPR.
“Facebook has even blocked accounts of users who have not given consent. In the end users only had the choice to delete the account or hit the 'agree' button,” Schrems said in a statement. He said that was not a “free choice” but more akin to “a North Korean election process.”
The complaints specifically target a practice known as “bundling,” under which users are asked to give consent for their data to be used in a range of ways in order to continue to use the service. This method, the complaints allege, renders user consent invalid, “as such consent would not be in any way 'specific,' but rather based on an 'all or nothing' approach.”
With the GDPR carrying a maximum penalty of 4 percent of a company's global revenue, Schrems calculated Google could be on the hook for 3.7 billion euros, and Facebook for 3.9 billion euros — 1.3 billion euros each for Facebook, WhatsApp, and Instagram.
In the statement, he called the complaints a “crucial test” of whether the GDPR's new penalties will really have any “teeth.”
Schrems has long been a thorn in the side of Facebook and U.S. tech companies. While still a law student, he filed a complaint against the social media giant that ultimately led to the U.S.-EU “Safe Harbor” framework for data transfers being struck down by the EU's top court. Another related case he filed is still pending.
The GDPR complaints were put together by a new nonprofit organization Schrems create, called “None of Your Business,” or NOYB.
In response to the complaints, Facebook chief privacy officer Erin Egan said the company had “prepared for the past 18 months to ensure we meet the requirements of the GDPR.” She added that the company had made Facebook's policies clearer, its privacy settings easier to find, and made it easier for users to access, download and delete their data.
Google offered a similar statement. “We build privacy and security into our products from the very earliest stages and are committed to complying with the EU General Data Protection Regulation,” it said. “Over the last 18 months, we have taken steps to update our products, policies and processes to provide users with meaningful data transparency and control across all the services that we provide in the EU.”
The complaints are now in the hands of the data protection authorities in France, Belgium, Germany and Austria. In a statement, NOYB said that the Irish data regulator would also likely get involved, given that Facebook's EU headquarters are in Ireland.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllClifford Chance Under Fire for Human Rights Assessment of Saudi Arabia World Cup Bid
5 minute readThe Week in Data Nov. 7: A Look at Legal Industry Trends by the Numbers
Trump Win Ignites Global Legal Market: Lawyers Prepare for High Demand & Uncertainty
Netflix Offices Raided by Authorities in Paris and Amsterdam
Trending Stories
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250