Affiliate links on Android Authority may earn us a commission.Learn more.

Google already sued for $3.7 billion for alleged Android GDPR violations

July 26, 2025

Today is the first day that Europe’s landmarkGeneral Data Protection Regulation (GDPR)takes effect. Although almost every internet company has had to alter its privacy and data collection policies to comply with the new law (which is why you’re receiving so many emails on privacy policy changes), some argue thatGoogleisn’t doing enough.

That’s why Austrian privacy activist Max Schrems – a vocal critic of Google’s data collection practices – is suing the company to the tune of $3.7 billion.

This is the featured image for the best privacy apps for android

Schrems is also suingFacebookand its major subsidiariesInstagramandWhatsApp. The Facebook lawsuit is for a little more money than Google, at $3.9 billion, viaThe Verge.

Although Google madesweeping changes to its privacy policy(as did Facebook, Instagram, and WhatsApp), Schrems argues that the company is violating the GDPR in that the acceptance of that policy is “all-or-nothing.”

Part of the GDPR statutes state that users should be able to opt-in or opt-out of specific policies when it comes to privacy and data collection, not either accept everything or be barred from using the product. Schrems argues that the companies in question violate these statutes by asking you to either accept or deny the changes to their privacy policies; if you deny the changes, you can’t use the service.

Google and Facebook issued statements in response to the lawsuits, predictably disputing the charges. “We build privacy and security into our products from the very earliest stages,” Google said in the statement, “and are committed to complying with the EU GDPR.”

A Facebook spokesperson denied any wrongdoing and said that the company has “prepared for the past 18 months to ensure we meet the requirements of the GDPR.”

Although Schrems has a point, it is still unclear how European regulators plan to enforce the GDPR statutes. Legal cases of this magnitude will be expensive and time-consuming, so we’ll have to wait and see just how committed the EU is to the GDPR and enforcing its statutes.

NEXT:Google makes privacy policy easier to understand, adds new data controls

Thank you for being part of our community. Read ourComment Policybefore posting.