"DSB Austria — The DPA Behind Schrems I & II: What Max Schrems' Home Country DPA Requires for Data Transfers"
The Challenge
Austria's Datenschutzbehörde (DSB) is the lead supervisory authority for cases filed by NOYB (None of Your Business) — Max Schrems' privacy advocacy organization — which has filed 100+ strategic GDPR cases across the EU. Austria's DSB issued landmark decisions on Google Analytics, Facebook Pixel, and AI training data. Schrems III is anticipated in 2025-2026 following ongoing US surveillance law challenges.
By the Numbers
- NOYB filed 422 GDPR complaints handled by DSB 2022-2024
- DSB issued landmark Google Analytics decision (January 2022) prohibiting US data transfers
- €3.5M total DSB fines 2019-2024
- 78% of DSB enforcement cases involve data transfers or third-party integrations
- Schrems II (2020) invalidated EU-US Privacy Shield affecting 5,000+ companies
Technical Approach
DSB/NOYB enforcement targets third-party data transfers — the exact risk mitigated by anonym.legal's local processing. Zero-knowledge architecture eliminates the "transfer" that triggers DSB jurisdiction.
Comments (0)