Max Schrems files GDPR complaints against Amazon, Apple, Netflix, Spotify, YouTube, others for failing to provide required info about data they collect on users
European privacy campaigner Max Schrems has filed a fresh batch of strategic complaints at tech giants, including Amazon, Apple, Netflix, Spotify and YouTube.
Context & Ripple Effects
This is the second wave of Max Schrems' GDPR enforcement campaign. In May 2018 he filed official complaints against Google, Facebook, WhatsApp and Instagram over forced consent within days of the regulation taking effect; this batch shifts the target list to Amazon, Apple, Netflix, Spotify and YouTube and the legal theory from consent to transparency — companies allegedly failing to provide the information about collected data that GDPR access rights require.
The arc matters because it shows a repeatable playbook rather than a one-off: the same campaign group later returned to Apple specifically with noyb's IDFA tracking complaints to German and Spanish regulators, indicating these filings are designed as a rolling series against the largest ad- and data-driven platforms.
First-order effects
- Amazon, Apple, Netflix, Spotify and YouTube now face regulator scrutiny over their data-access responses, forcing legal and privacy teams at each to document exactly what data they hold on users and how they disclose it.
- The named companies can no longer treat individual access requests as routine support tickets — a coordinated complaint batch converts them into formal regulatory cases with precedent value.
Second-order effects
- Rival consumer platforms outside this first target list face pressure to audit their own disclosure practices before becoming the next filing, since the complaint template is public and reusable.
- EU regulators gain a test case for whether GDPR transparency rights carry real penalties, which shapes how aggressively other member-state authorities handle similar complaints.
Third-order effects
- If the pattern holds, GDPR compliance becomes an ongoing adversarial process driven by activist organizations like noyb rather than annual audits, raising the baseline cost of operating consumer data businesses in Europe.
- Systematic enforcement of access-and-transparency rights could push large platforms toward standardized, machine-readable disclosures of user data collection as a defensive measure.
The trend: Max Schrems and noyb are converting GDPR from static legislation into a serial enforcement campaign, filing successive complaint waves against major US consumer platforms.