Collective data request under the GDPR with tech giants

The SOMI Foundation submits the largest European collective request for personal data to tech giants TikTok, Zoom and Palantir. According to the GDPR, companies are obliged to provide the stored personal data.


This article was published on 29th July 2021 on Emerce in the Netherlands. Please find the English translation below.


SOMI requests the personal data on behalf of its participants as part of the investigation into the possible violation of the GDPR by the international companies.

The GDPR prescribes that European companies are obliged to provide access to stored personal data upon request. In addition, it must be clearly stated how the personal data is stored and with whom it is shared.

The first collective application is being submitted today to TikTok, Zoom and Palantir on behalf of 65,000 participants. On Wednesday 11 August, a second application will be submitted on behalf of new participants.

TikTok, Zoom and Palantir must – in accordance with GDPR guidelines – comply with the request for access to personal data within one month. If the companies do not cooperate with SOMI's collective data request or if they provide incomplete data, SOMI will take further legal action. This can be a declaration to the Dutch Data Protection Authority, or a request to collectively adjust or delete data.

SOMI has introduced an app with which it provides consumers with insight into the requested personal data, fully in accordance with privacy legislation. The supplied data is presented in a clear format, so that the consumer understands which data is stored about him or her, how their data is used by the tech giants and how this information can be adjusted or deleted.

Participation is easy via the SOMI app, which can be downloaded in the App Store and Google Play, or via https://datarequests.somi.nl/ .


Click here for the original article on Emerce.nl (in Dutch)