SOMI is taking the next step in representing the rights of European citizens by performing a collective data request on the behalf of participating consumers.
For this campaign, we are requesting data from three tech giants: TikTok, Palantir & Zoom which have allegedly violated the GDPR and unlawfully processed data from millions of European citizens.
Only if companies are completely transparent about the use of personal data and possible negative consequences, individuals can make informed decisions and exercise control over their private information.
The GDPR gives you the right to request your personal data from any company that collects and processes it. However, the procedure can be complicated and often time consuming. SOMI takes away the hassle by exercising the right of access to your personal data on your behalf.
The General Data Protection Regulation or GDPR which came into force on 25th May 2018 in the European Union (EU) and the European Economic Area (EEA), enforces data protection and privacy for European citizens and residents. Under Article 15 of the GDPR, individuals have the ‘right of access’ and to receive a copy of their personal data from any data processing entities operating in the EU and EEA, along with the following information about how the personal data are collected and processed.
Purposes of data processing
Categories of personal data being processed
Recipients to whom personal data have been or will be disclosed
Envisaged period for which the personal data will be stored
From which source the personal data originate
The existence of automated decision-making or profiling, the information about the logic or algorithm involved, as well as the reasons behind and the possible consequences of such processing
Transfer of personal data to a third country outside of the EU and EEA
SOMI presents this following selection of companies in the largest collective data request in Europe: TikTok, Palantir, and ZOOM. These are foreign companies that process the personal data from more than millions of European citizens. Non-EU companies are also obliged to follow the GDPR guideline when processing the personal data of European citizens and residents. SOMI has previously filed several complaints against these companies for allegedly violating the GDPR and unlawfully processing of personal data.
The popular TikTok app collects a lot of the user's personal data such as IP address, phone and social network contacts, locations, and data provider information. The users are not sufficiently informed about these data transfers. TikTok is suspected of sending user data to servers in China. In addition, experts have found security flaws in the TikTok app that allow hackers to access user information.
Several public agencies in Europe are working with the US data analytics firm Palantir, which has been involved in data scandals and criticized for its close ties to the US government and intelligence agencies such as CIA and NSA. Moreover, COVID-19 pandemic has given Palantir more opportunities to access European citizens’ data, as many countries have used Palantir software to track the spreading of Coronavirus.
ZOOM video conference service has been accused of several data breaches and privacy violations. For instance, Zoom allegedly transfer its user data to Facebook and automatically link its users’ data to LinkedIn profiles without providing this information on their privacy policy. Moreover, a security flaw was discovered that give hackers access to users’ cameras.
In three simple steps you can request your personal data without any hassle.
We process your personal data as described on our privacy policy and in line with the GDPR.
You can choose to request your data from TikTok, Palantir and ZOOM, and/or other companies selected by SOMI.
The registration of this campaign will be opened for 2 weeks, after which the data request will be submitted to the companies. You can check the amount of registration via our DPE scoreboard
When received a request, the companies are obliged to provide a copy of your data within the period of 1-3 months.
You can participate in this campaign by filling in the online registration form above.
You can only participate if you reside in the EU/EEA member states (including Ireland and Switzerland), and if you are 18 years or older. Unfortunately, it is not possible for non-EU residents to participate, however, please subscribe to SOMI to stay informed about our future actions that you might be able to participate in.
No, SOMI will not charge any fee for this campaign.
Unfortunately, no. The goal of this action is only to request copies of personal data from TikTok, Palantir, and Zoom. However, if SOMI found that the GDPR was being violated in a large scale, we will subsequently start a litigation. If you reside in the Netherlands, is it still possible to participate in our litigation against TikTok. You can find more information here.
In order to request your personal data on your behalf, we need to be able to provide information to verify your identity and prove that you have given us authorization to act on your behalf. This is why we also ask you to sign the Power of Attorney.
We recommend using the Dutch government's Copy ID app to make a secure copy of your ID.Please make sure to black out the following information:
National ID, Driver’s license or Passport
Please upload only the front side and black out the photo, national identification
number, document number and any machine-readable areas.
According to the GDPR, the data processing entities should provide the copy of personal data within one month of receipt of the request. The GDPR also allows the extension of the time limit by two further months taking into account the complexity and number of the requests.
After the data processing entities handed over the personal data to us, we will encrypt such data and store it securely on our server. You can download your personal data and relevant information via your account on my.somi.nl and via the SOMI app.
The Foundation for Market Information Research (SOMI) is a non-profit organization with the purpose to identify and influence issues of social importance. SOMI is committed, among other things, to protecting the fundamental rights of consumers and minors who use online services.
For more information about SOMI, visit somi.nl
Up until now, all procedural and legal costs have been borne by SOMI and its board. In order to finance new actions and future initiatives, we are looking for external financer to support us in the litigation(s).
If your organization is interested in supporting the non-profit initiatives in the field privacy and data protection, and protecting fundamental rights of consumers in online services.
Please reach out to us at info@somi.nl
Support our cause by inviting your friends to participate.
If you are interested to be our media partner, please get in touch with us directly via campaign@somi.nl.
