Case Studies

Border Violence Monitoring Network (BVMN) and I Have Rights, a refugee law clinic based in Samos, Greece, are preparing for litigation challenging the technology and surveillance infrastructure of the Samos

In October 2024, La Quadrature du Net (LQDN) along with 14 other organisations began litigation against a risk-scoring algorithm used by the CNAF (Caisse nationale d’allocations familiales), the family branch

In mid-2019, the media revealed that the UK Home Office had been using an algorithm/automated computer system for five years to process visa applications. Foxglove and JCWI argued that the

Asociación Élite Taxi is litigating against ride-hailing platform, Free Now over the platform's use of opaque pricing algorithms in the regulated taxi sector.Taxi fares in Barcelona are set by public

In December 2021, the Norwegian Data Protection Authority (DPA) issued an administrative fine of NOK 65 million (around EUR 6.5 million) against dating app Grindr for disclosing personal information about

Foxglove, with the Independent Publishers Alliance, is pushing UK and European competition regulators to intervene and stop Google from using AI tools to scrape the work of independent news reporters

GFF believe that information about algorithm-driven technology used by state bodies in Germany should be accessible to anyone who wants to scrutinise it. When the public can check that technology

Leitmotiv and PILP are seeking to accelerate local datacentre activism, taking confrontations with hyperscale datacentres in the major digital infrastructure market of the Netherlands as a starting point. They want

GLAN are working in partnership with Bindmans LLP to devise a strategic litigation approach to achieve accountability for the use of Pegasus malware on UK-based smartphones in violation of individuals’

“Gig workers” are oppressed, misclassified as self-employed and denied the right to a minimum wage, as well as freedom from discrimination and unfair dismissal. Their oppression is exacerbated by digitisation,

CIJ is preparing for litigation enforcing the EU Digital Services Act (DSA) to address gender-based censorship by Meta platforms and other Very Large Online Platforms (VLOPs). CIJ found that Meta

Under the guise of detecting potential welfare and tax fraud, the Dutch government introduced a computerised system (System Risk Indication or “SyRI”) that profiled individuals based on vast pools of

As exams were shifted online during the COVID-19 pandemic, some German universities began to use proctoring software to monitor students taking their exams. This software may violate fundamental rights by

Victim Advocates International (VAI) is supporting a number of members of the Rohingya community to take litigation against Meta in Ireland. The litigation relates to Facebook's role in spreading the

The “Top 400” programme in Amsterdam profiles minors and young adults to predict the 400 most likely to commit serious crimes. This programme is problematic because it disproportionately targets marginalised

Reversing.works will identify the most effective legal strategy to litigate data protection violations affecting platform workers engaged through intermediaries in Germany’s food delivery sector.The research will strengthen litigation by:· Providing

Due to the COVID-19 pandemic many educational institutions in the UK have moved exams online and are turning to remote proctoring as a monitoring solution. This potentially results in a

The Child Poverty Action Group (CPAG) is taking litigation in the UK related to the universal credit system administered by the UK Department for Work and Pensions. Universal credit is

In October 2024, IuRe filed a lawsuit with the Municipal Court in Prague to challenge the processing and use of sensitive personal medical data by the Czech Institute of Health

The online advertising industry (adtech) is built on the trade of personal data, including intimate and sensitive details about individuals. Information about individuals is shared and sold across thousands of

Partners Serbia will implement a litigation and advocacy project that puts Serbia, and the Western Balkans, on a rights-centred path toward the EU Digital Single Market (DSM).In June 2024 Meta

The EU Passenger Name Record (PNR) Directive obliges airlines to collect personal, and sometimes potentially sensitive, data of travellers and share it with government authorities. The data is mined and

ERRC state that the digitalisation of public services in Albania and Bulgaria has amplified systemic inequalities, disproportionately affecting marginalised communities, particularly Roma. While these initiatives were introduced to modernise administrative

Open Rights Group, Migrants’ Rights Network and Migrants At Work sought to determine how a test claim could be brought to challenge the Home Office’s use of automated digital identity

Based on research carried out by Tracking Exposed (now rebranded into Reversing Works), privacy activists lodged a complaint before the data protection authority (DPA) of Italy. In November 2024, after

Association Taxi Project 2.0 carried out pre-litigation research to support the preparation of a complaint(s) against ride-sharing companies in Spain. Taxi Project has been analysing the behaviour of dynamic pricing

The Ministry of Justice in Poland is using a computer system to randomly allocate cases to judges. Some judges claim that since the system was deployed, they have been given

In September 2025, Spain's Supreme Court ruled in Civio's favour after a seven-year legal battle, ordering the government to release the source code of BOSCO, an algorithm determining eligibility for

(RE)Claim is taking litigation challenging illegal and discriminatory data processing by police. According to (RE)Claim this data is used to criminalise and harass racialised boys (starting as early as 11

Internet users are being profiled and targeted by various online and digital business practices in a way that influences how they think. Examples include the use of targeted advertising or

medConfidential is examining possible legal action in relation to the unlawful processing of patients’ medical data by Sensyne Health plc, a private company, which has data sharing agreements with several

Based on research carried out by Tracking Exposed (now rebranded into AI Forensics) since 2019, privacy activists have lodged complaints before the data protection authorities of Italy and Cyprus alleging

The German Asylum Act grants the Federal Ministry for Migration and Refugees the power to access the mobile devices of migrants and asylum seekers, without a warrant, in order to

StraLi for Strategic Litigation (StraLi) is preparing a strategic path to challenge the use of facial recognition technology by law enforcement and judicial authorities in Italy. They will also identify

In Slovenia, the Act on Urgent Measures to Ensure Public Security (“Sutar Law”) was adopted in November 2025 and entered into force in January 2026. According to the Roma Feminist

In Serbia, the Law on Social Card was adopted in 2021, establishing an electronic register containing the data of beneficiaries of social protection schemes, and enabling automated processing of data

AI systems rely on significant labour for their training and deployment. There are millions of data workers in the world who feed AI systems by producing, categorising and correcting data.

Privacy First are challenging the Dutch Automatic Number Plate Recognition (ANPR) Act, which was adopted in November 2017 and entered into force in January 2019. The Act enables the Dutch

In 2024, PILP took litigation challenging automated decision making through the use of an algorithm by banks in the Netherlands, resulting in discrimination against people with "exotic" sounding names, whose

Poradňa are preparing legal action challenging discrimination against the Roma ethnic minority in Slovakia, with a focus on access to public transport ticketing systems that require digital tools and skills.