NOYB (None of Your Business)

NOYB (None of Your Business)
Name	NOYB (None of Your Business)
Type	Nonprofit
Founded	2017
Founder	Max Schrems
Headquarters	Vienna, Austria
Area served	European Union, United States
Focus	Data protection, Privacy rights, GDPR enforcement

NOYB (None of Your Business) is a privacy advocacy organization and strategic litigation group established to enforce data protection rights under the General Data Protection Regulation and related privacy laws. Founded by activists and lawyers, the organization engages in legal challenges, regulatory complaints, public campaigns, and technical projects to hold technology companies and public institutions accountable. NOYB operates across jurisdictions, interacting with supervisory authorities, courts, and international bodies to shape data protection practice.

History

NOYB was founded in 2017 by Max Schrems following landmark litigation against Facebook that involved interventions in the European Court of Justice, including challenges connected to the Safe Harbor (law) framework and Privacy Shield (EU–US) arrangements. In its early years NOYB built on precedents set in cases involving Court of Justice of the European Union, Austrian Data Protection Authority, and transatlantic data transfer disputes with entities such as Microsoft and Google. The organization expanded its activities during the rollout of the General Data Protection Regulation by bringing complaints before national supervisory authorities like the Commission Nationale de l'Informatique et des Libertés, the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, and the Irish Data Protection Commission. NOYB has engaged with international institutions including the European Commission, the European Data Protection Board, and the United Nations Human Rights Council on privacy and surveillance topics.

Mission and Objectives

NOYB's stated mission focuses on enforcing digital privacy rights through litigation and advocacy, emphasizing enforcement of the General Data Protection Regulation, cross-border data transfer rules, and individual rights such as access, erasure, and portability. The organization aims to influence regulatory frameworks at the level of the European Parliament, the European Council, and national legislatures while litigating before courts such as the European Court of Human Rights and national supreme courts like the Bundesverwaltungsgericht or regional high courts. NOYB seeks to challenge transfer mechanisms involving jurisdictions including the United States and China and to hold corporations like Amazon (company), Apple Inc., Facebook, Inc., Meta Platforms, Inc., Twitter, Inc. (X), and TikTok accountable under privacy statutes.

Legal Actions and Strategic Litigation

NOYB employs strategic litigation tactics including representative complaints, test cases, and referrals to supervisory authorities such as the Data Protection Commission (Ireland), the CNIL (France), and the Austrian Data Protection Authority. The organization has initiated legal proceedings invoking provisions from instruments like the Charter of Fundamental Rights of the European Union, the European Convention on Human Rights, and the GDPR. NOYB frequently coordinates cross-border complaints leveraging lead authority mechanisms in the One-Stop-Shop (GDPR) system, files appeals in administrative courts such as the Bundesverwaltungsgericht and the High Court of Ireland, and brings constitutional challenges before courts including the Constitutional Court of Austria. It also submits amicus curiae interventions in cases before the Court of Justice of the European Union and national appellate tribunals.

Notable Cases and Outcomes

NOYB played a central role in litigation that followed the invalidation of the Safe Harbor (law) framework and the Privacy Shield (EU–US) agreement, contributing to decisions affecting companies such as Facebook and Google. The organization has successfully brought complaints that resulted in enforcement actions by authorities including the CNIL, the Irish Data Protection Commission, and the Austrian Data Protection Authority, with outcomes ranging from fines to mandates to change processing practices. Notable case topics include challenges to tracking technologies used by Facebook, Inc., adtech practices employed by Google, and transfer mechanisms involving Amazon Web Services and Microsoft Azure. NOYB has also secured rulings supporting rights of access and deletion against platforms like LinkedIn and YouTube and influenced legal interpretations used in litigation before the European Court of Human Rights and national supreme courts.

Organizational Structure and Funding

NOYB is structured as a nonprofit association headquartered in Vienna, with legal teams, policy experts, and technologists collaborating across offices and partner organizations in cities such as Brussels, Berlin, and Dublin. The group's governance includes a board of directors, legal counsel, and advisory members drawn from privacy scholars and practitioners connected to institutions like the Max Planck Society and universities such as University of Vienna and Humboldt University of Berlin. Funding sources comprise donations from individuals, grants from philanthropic foundations, and membership contributions, as well as limited project funding from organizations like the Open Society Foundations and European research programs; NOYB maintains a policy of disclosing funding streams in its annual reports to ensure transparency to authorities like the European Data Protection Board.

Criticism and Controversies

NOYB has faced criticism from technology companies including Meta Platforms, Inc., Google LLC, and Apple Inc. for its aggressive litigation tactics and for filing large volumes of complaints that some regulators and industry groups argue strain administrative resources, a perspective voiced by trade associations such as DigitalEurope and critics in national ministries. Regulators like the Irish Data Protection Commission have at times been criticized for slow enforcement in cases involving NOYB, prompting debate in forums including the European Parliament and the Committee on Civil Liberties, Justice and Home Affairs. Observers from organizations such as Reporters Without Borders and Human Rights Watch have both supported and questioned aspects of NOYB's strategies, while some scholars at institutions like Oxford University and Harvard University have debated the implications of strategic litigation on regulatory priorities.

Category:Privacy advocacy groups Category:Data protection organizations