Start at page 28 if you want to skip the recap of EU law, or start at page 35 if you want to skip the details of US law and surveillance programs as recap by the Irish court who referred the ruling.
https://curia.europa.eu/jcms/upload/docs/application/pdf/202...
It's a bit sad that people have to fight this war on personal title.
It's mainly odd to me that there aren't more privacy / consumer protection groups doing the same things he does.
Dieselgate was started by such a group.
The system is not all bad, but incentives are against stuff like this being litigated by the usual privacy or consumer support groups, because you just can't collect fees from the legislative branch...
There are a lot of smaller groups fighting, but it takes years and years to see results. Hopefully the EU itself will get more into it now that our relationship with the US is deteriorating and China is getting more and more aggressive.
Not that it’ll matter too much with Microsoft being the only real option in non-tech enterprise.
But the national data protection commissions of each country also do plenty of work. I think they're still swamped, though.
If you donate EUR 100, you get Consultation on private data protection cases (2h/year)
The German DPAs love going after random individual cases they find, often in ways incompatible with reality (e.g. a small company not using GPG when e-mailing employees about HR issues), while ignoring major abuses that happen at scale. The biggest fine they issued was to a real estate management company for not deleting old documents (e.g. proof of income) that tenants had provided.
Not a single fine against adtech companies.
Perhaps this Wikipedia page will be updated soon: