None Of Your Business (NOYB)

None Of Your Business (NOYB)
Name	None Of Your Business (NOYB)
Formation	2017
Founder	Max Schrems
Type	Non-governmental organization
Headquarters	Vienna, Austria
Fields	Privacy advocacy, data protection

None Of Your Business (NOYB) None Of Your Business (NOYB) is a European privacy advocacy organization focused on enforcing data protection rights and litigating under the General Data Protection Regulation (GDPR). NOYB engages in strategic litigation, public campaigning, and policy interventions across the European Union, Austria, and international fora. The group frequently interacts with regulatory bodies, courts, and civil society coalitions to advance privacy protections in the digital sector.

Overview

NOYB operates as a non-governmental organization engaged in privacy litigation, enforcement, and advocacy, often invoking the General Data Protection Regulation alongside interactions with European Data Protection Board, European Court of Justice, Austrian Data Protection Authority and national supervisory authorities. The organization pursues cases involving technology companies such as Facebook, Google, Apple Inc., Amazon (company), Microsoft, and ad-tech firms, while coordinating with civil society groups like Electronic Frontier Foundation, Access Now, Privacy International, European Digital Rights, and Bits of Freedom. NOYB's activities intersect with regulatory frameworks including the ePrivacy Directive, Charter of Fundamental Rights of the European Union, Convention 108 and litigation venues like the Court of Justice of the European Union and national courts in Austria, Germany, France, Spain, and Netherlands.

History and Founding

NOYB was founded in 2017 by privacy activist Max Schrems following landmark litigation such as the invalidation of Safe Harbour by the Court of Justice of the European Union and subsequent challenges to the Privacy Shield framework. The group's early work built on precedents from cases involving Facebook Ireland Limited, complaints to the Irish Data Protection Commission, and transatlantic data transfer disputes involving United States law enforcement access under statutes like the Foreign Intelligence Surveillance Act. Founding activities drew on networks including European Consumer Organisation (BEUC), Austrian Parliamentary Commission, and academic researchers from institutions linked to University of Vienna, Harvard Law School, and Columbia Law School.

Legal Actions and Strategic Litigation

NOYB has pursued strategic litigation targeting consent mechanisms, data transfers, and automated decision-making, filing complaints and lawsuits referencing the General Data Protection Regulation, national privacy statutes, and case law from the Court of Justice of the European Union. High-profile actions have involved companies such as Facebook, Google, Apple Inc., Twitter, LinkedIn, and ad-tech entities, and have been lodged with authorities including the Irish Data Protection Commission, CNIL, Bundesbeauftragter für den Datenschutz und die Informationsfreiheit, and courts in Vienna, Dublin, and Paris. NOYB participates in litigation alongside law firms and organizations like Hausfeld LLP, Akin Gump, Leigh Day, Advocate General, and often cites rulings such as Schrems I, Schrems II, and opinions from advocates in the Court of Justice of the European Union. The organization has sought interim measures, fines, and judicial declarations, and has engaged with enforcement tools under directives and regulations administered by bodies like the European Commission and the European Data Protection Supervisor.

Advocacy and Policy Work

Beyond litigation, NOYB engages in policy advocacy before institutions such as the European Parliament, Council of the European Union, European Commission, and national legislatures including the Austrian National Council and committees within the German Bundestag. The group provides submissions to consultations on proposals tied to the ePrivacy Regulation, digital markets legislation referenced in Digital Markets Act, and digital services frameworks associated with the Digital Services Act. NOYB collaborates with think tanks like Bruegel, lobby monitoring organizations such as Transparency International, and networks including Global Privacy Assembly to influence policy on interoperability, data portability, and international data transfers. It issues guidance, model complaints, and template letters used by litigants, activists, and legal scholars at universities such as University College London and Sciences Po.

Organizational Structure and Funding

NOYB is organized with a leadership team, legal counsel, and administrative staff based in Vienna and satellite operations across Europe, engaging volunteers, fellows, and expert advisors drawn from firms, academia, and advocacy groups such as EDRi and Amnesty International. Funding sources reported include donations, membership fees, grants from foundations like Open Society Foundations, project grants from philanthropic entities, and litigation crowdfunding campaigns involving supporters from networks linked to Reddit, Twitter, and European donor circles. NOYB's financial model has been compared to other NGOs including European Consumer Organisation (BEUC), Privacy International, and Access Now in transparency filings and annual reports presented to stakeholders like the Austrian Commercial Register and partner organizations.

Criticisms and Controversies

NOYB has faced criticism and controversy over its litigation strategy, funding transparency, and interactions with regulators, drawing commentary from media outlets including Der Standard, The Guardian, New York Times, Frankfurter Allgemeine Zeitung, and legal scholars at institutions such as University of Oxford and Max Planck Institute for Innovation and Competition. Critics from corporate law departments at firms like Freshfields Bruckhaus Deringer and policy advisors in Brussels have argued about case selection, resource allocation, and impacts on businesses including SMEs and multinational platforms. Debates have occurred in forums like the European Parliament and industry groups such as DigitalEurope regarding the balance between privacy enforcement and innovation, with responses from regulators including the Irish Data Protection Commission and national courts in disputes over admissibility and standing.

Category:Privacy advocacy organizations