Data Privacy Blog

Noyb.eu, who became famous for taking on Facebook, is demanding that businesses in the EU provide a simple yes/no option on cookie banners. Otherwise, they could face significant fines (maximum GDPR fines)

Using software that automatically detects non-compliant websites, noyb identified their initial list and sent out the first wave of complaints. Once a company receives the warning, they have one month to become compliant. If not, noyb will file formal complaints with the appropriate data authorities. Additional scans will continue throughout this year, which could result in another 10,000 complaints.

Max Schrems, Chair of noyb.eu: "A whole industry of consultants and designers develop crazy click labyrinths to ensure imaginary consent rates. Frustrating people into clicking 'okay' is a clear violation of the GDPR's principles. Under the law, companies must facilitate users to express their choice and design systems fairly. Companies openly admit that only 3% of all users actually want to accept cookies, but more than 90% can be nudged into clicking the 'agree' button."

Large corporations, especially multi-nationals, have teams of privacy specialists to help them adapt to regulations.  However, many businesses struggle without the right tools or support to ensure they are compliant.  Those that do not take action, some hoping regulators will focus only on larger enterprises like Facebook, are taking a large risk.

As technology improves, we can expect more enhanced scanning techniques which will more easily and quickly identify those not in compliance. resulting in increasing fines and damaged reputations.

As Mr. Schrems said "We want to ensure compliance, ideally without filing cases. If a company however continues to violate the law, we are ready to enforce users' rights."