NOYB publishes 2025 annual report

Austrian privacy and digital rights advocacy group NOYB has published its latest annual report, revealing that its activities have generated administrative fines totalling €2 billion.

In 2025, NOYB filed several new data protection complaints and prepared its first collective redress lawsuit against Austrian credit agency CRIF, an approach it intends to continue throughout 2026. The advocacy group also maintained legal scrutiny of artificial intelligence (AI), issuing a cease-and-desist letter to Meta and filing a second complaint against OpenAI over model training. In addition, NOYB contributed legal expertise to EU policymakers concerning the European Commission's Digital Omnibus package.

Enforcement outcomes included the French data protection authority, the CNIL, fining Google €325 million over Gmail advertising, alongside an Austrian DPA ruling prohibiting non-consensual tracking cookies in Microsoft 365 Education. NOYB also secured two major judicial victories after the General Court of the EU Court of Justice dismissed claims by the Irish Data Protection Commission (DPC) and ordered it to investigate Meta's processing of sensitive data, while the Austrian Supreme Court ruled that Meta must disclose all held personal data, sources, and processing purposes to users. 

Training Announcement: Find out more about our range of independent accredited qualifications from BCS and IAPP. These include professional certifications for practitioners covering data protection and AI governance, information security and risk management, along with access to public information.