Netflix Faces Data Access Fine in the Netherlands

A Lengthy Wait for a GDPR Decision Against Netflix

The title "Five Years Later" might evoke images of a zombie movie sequel, but it actually signifies the extensive timeframe it took for a data access complaint against Netflix to result in a penalty ruling within the European Union.

The Imposed Fine

A fine of €4.75 million (approximately $5 million based on current exchange rates) has been issued to Netflix under the General Data Protection Regulation (GDPR). This comes after a considerable delay. In comparison, Netflix generated roughly $33.7 billion in revenue during 2023.

Violation of Data Access Rights

The Dutch Data Protection Authority (DPA) determined that Netflix did not sufficiently clarify to its customers how their data is utilized. This is a direct violation of GDPR data access rights.

EU citizens have the right to request a copy of their personal information and understand its usage.

Challenges in GDPR Enforcement

This protracted enforcement process, culminating in a relatively modest penalty, highlights the difficulties in translating individual rights into effective accountability for large corporations. Netflix is contesting the penalty and may pursue an appeal, meaning the final outcome remains uncertain.

Wider Complaints Against Streaming Services

The privacy advocacy group, noyb, which initiated the Netflix complaint, simultaneously filed similar complaints against other streaming services regarding data access concerns.

These included Amazon Prime, Apple Music, and YouTube, with most cases still awaiting resolution.

Status of Other Cases

According to noyb, progress has been limited. “Nearly all complaints are still pending, with exceptions being Flimmit in Austria and Spotify, where a victory was achieved last year after legal action against the DPA for inaction.”

Furthermore, the case against Apple Music is progressing in Ireland, and legal action has been taken against the Luxembourg DPA for inactivity concerning Amazon.