Austrian privacy activist takes aim at ‘forced consent’ as sweeping EU data law takes effect
Lawyer says some social media websites are illegally blocking access to users unless they agree to the way company uses their personal information
As Europe’s new privacy law took effect on Friday, one activist wasted no time in asserting the additional rights it gives people over the data that companies want to collect about them.
Austrian Max Schrems filed complaints against Google, Facebook, Instagram and WhatsApp, arguing they were acting illegally by forcing users to accept intrusive terms of service or lose access.
That take-it-or-leave-it approach, Schrems said, violates people’s right under the General Data Protection Regulation (GDPR) to choose freely whether to allow companies to use their data.
“You have to have a ‘yes or no’ option,” Schrems said in Vienna before he filed the complaints in various European jurisdictions. “A lot of these companies now force you to consent to the new privacy policy, which is totally against the law.”

The GDPR overhauls data protection laws in the European Union that predate the rise of the internet and, most importantly, foresees fines of up to 4 per cent of global revenues for companies that break the rules.