What happened
The Norwegian Consumer Council and privacy NGO noyb have lodged a joint complaint with the Norwegian Data Protection Authority against Schibsted for its “Pay or Okay” system that forces users to pay to refuse tracking. The complaint argues the practice violates the GDPR’s requirement for freely given consent and requests the DPA to declare it illegal and consider a fine. Similar complaints have been filed in Sweden, where the practice originated.
Why it matters for trust and compliance
- Its status is filed. The case is still open; the outcome may change what it means.
- The complaint challenges a forced‑consent model that could undermine GDPR consent standards across the Nordics.
- It relates to GDPR. The regulations library explains what that law requires.
Who is affected
media technology controller platform Schibsted
Recommended actions
- Review consent, cookie and tracking practices against the requirement.
- Inventory where this data is shared or sold and whether opt-outs are honoured.
- Inventory AI or automated decision systems in scope and their assessments.