Enforcing jurisdiction
Austria · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Maximilian Schrems – Court Ruling (Austria, 2025)

Court Ruling
DPA OGH26 November 2025Austria
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Maximilian Schrems won a court ruling that requires Meta to give him full access to his personal data. The court found that Meta had not provided complete information as required by data protection laws. This case is significant as it reinforces users' rights to access their data held by companies.

What happened

The Austrian Supreme Court ruled that Meta must provide full access to personal data requested by Maximilian Schrems.

Who was affected

Maximilian Schrems, a user of Meta's social networking platform.

What the authority found

The court held that Meta failed to comply with the legal requirement to provide complete access to personal data.

Why this matters

This ruling strengthens users' rights under GDPR and sets a precedent for individuals seeking access to their personal data. Companies must ensure they can fulfill such requests promptly.

Recorded legal citations
Automatically processed
Art. 6 GDPR
Art. 7 GDPR
Art. 9 GDPR
Art. 15 GDPR
View original scraped data
Art. 6(GDPR)
Art. 7(GDPR)
Art. 9(GDPR)
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityOGH

Source checks

Linked-source text retrieved.

Automated check recorded — 19 March 2026.

No issues were reported by that automated check.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The data subject, Max Schrems, was a user of a social networking platform operated by Meta (Facebook/Instagram). He filed twelve claims against Meta alleging violations of the GDPR, seeking clarification of data processing roles, assessment of the legality of certain processing activities, access to his personal data, and €500 in non-material damages. Since 2011, the data subject had attempted to obtain full access to his personal data, but Meta only provided partial access. The data subject argued that Meta unlawfully processed his personal and sensitive data, failed to provide full access to all personal data upon request, and collected personal data from users through social plugins, third-party apps, and websites using them for personalized advertising without consent. The proceedings were initiated in 2014 and extended over a period of approximately 11 years, involving several judicial bodies. The Regional Civil Court in Vienna initially declined jurisdiction on two occasions, taking the view that the data subject did not qualify as a consumer in relation to his private account. In later decisions, the court [https://noyb.eu/sites/default/files/2020-06/Urteil%20FB_geschw%C3%A4rzt.pdf cited] [https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62021CJ0446 uncertainty regarding jurisdiction under the GDPR]. During the course of the proceedings, the Austrian Supreme Court submitted [https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62021CJ0446 two questions to the European Court of Justice (CJEU).] In 2021, the Supreme Court issued a [https://noyb.eu/sites/default/files/2020-12/BVI-209_blackened_en.pdf partial judgment], awarding data subject €500 in damages, while leaving the remaining claims undecided until the ECJ rulings were available. The Austrian Supreme Court has now ruled on the remaining points of the appeal. The Austrian Supreme Court (OGH) ruled that Meta must provide data subject full access to all personal data processed about him. Th

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Maximilian Schrems in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

26 November 2025

Authority

DPA OGH

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Maximilian Schrems - Austria (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: