Annual Report 2025 out now!
noyb has released its 2025 annual report, detailing a year of GDPR enforcement activity that includes new complaints, early work on its first collective redress case against Austrian credit agency CRIF, and engagement with the EU Commission's Digital Omnibus package. The organization reports that its legal work has cumulatively produced €2 billion in administrative fines.
Why this matters: noyb is one of the few organizations that actually forces GDPR enforcement rather than just talking about it. Two billion euros in fines is not nothing. The move toward collective redress is worth watching. Right now, most privacy violations hit individuals who cannot afford to fight back alone. A collective case changes that math. It lets groups of ordinary people pool a claim the way a company pools its legal budget. If noyb gets this model working, it becomes a real accountability tool, not just a threat companies can wait out.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.