95,000 complaints issued to EU Data Protection Authorities

Chief Executive Officer of Apple Tim Cook gives a speech during the 40th International Conference of Data Protection and Privacy Commissioners at the European Parliament in Brussels, Belgium, 24 October 2018. [EPA-EFE/STEPHANIE LECOCQ]

Recent figures issued from the European Data Protection Board to the European Commission reveal that EU Data Protection Authorities have received more than 95,000 complaints from citizens across the continent.

The announcement comes ahead of the EU’s ‘Data Protection Day’ on Monday (28 January).

Commission regulators laud the figures as being indicative of how much more aware EU citizens are of their digital rights.

“Citizens have become more conscious of the importance of data protection and of their rights. And they are now exercising these rights, as national Data Protection Authorities see in their daily work,” a joint statement from Commissioners Timmermans, Ansip, Jourová and Gabriel read on Friday (25 January).

“They have by now received more than 95,000 complaints from citizens.”

Trump’s privacy ombudsman nomination ‘is not a concession’, says EU

The EU’s Data Protection Supervisor, Giovanni Buttarelli, responded on Thursday (24 January) to US President Trump’s recent nomination of an ombudsperson to oversee the EU-US privacy shield agreement, saying that the announcement came “later than expected.”   

The European Data Protection Board also revealed that the majority of the complaints were related to activities such as telemarketing, promotional e-mails, and video surveillance.

EU Data Protection Authorities (DPAs) oversee the application of data protection law across the bloc. In a meeting with reporters on Thursday (24 January), the EU’s data protection chief, Giovanni Buttarelli, said that it was a 2019 objective for the European Data Protection Supervisor to better cooperate with national DPAs.


Monday’s Data Protection Day comes eight months after the entry into force of the EU’s General Data Protection Regulation (GDPR).

Thus far, 23 member states have transposed the legislation into national law, while five nations, Bulgaria, Greece, Slovenia, Portugal and the Czech Republic, are still in the process of doing so.

Commissioners on Friday rallied those who had not yet adopted the law nationally to implement the regulation “as soon as possible.”

“The Commission continues to monitor this process to address potential shortcomings,” the statement said.

GDPR affords powers to privacy authorities across the EU, allowing them to enforce fines of up to 4 percent of global revenue or €20 million, whichever is higher.

France hits Google with €50 million GDPR fine

By hitting Google with a fine, the French data regulatory authority has set a precedent which may rattle digital leaders across Europe – the derelictions of duty which Google is accused of in France are shared by many other operators. EURACTIV France reports.

€50 million 

The largest sanction to date is the €50 million fine that Google was faced with after the CNIL, the French data protection authority, took aim at the tech giant for failing to obtain users’ consent for personalised advertisements.

Google has since announced that is will appeal the fine.

“We’ve worked hard to create a GDPR consent process for personalised ads that is as transparent and straightforward as possible, based on regulatory guidance and user experience testing,” the company said in a statement.

“We’re also concerned about the impact of this ruling on publishers, original content creators and tech companies in Europe and beyond.”

Subscribe to our newsletters