LinkedIn Faces EU Legal Challenge Over Paywalled Profile Visitor Data – NOYB Claims GDPR Violation

LinkedIn is being taken to court in Austria by digital rights group None of Your Business (NOYB), which alleges the platform illegally blocks free users from accessing their 'Who's Viewed Your Profile' data unless they pay for a premium subscription. The complaint, filed this week, argues this practice violates Article 15 of the EU's General Data Protection Regulation (GDPR), which guarantees individuals the right to access their own personal data.

The Complaint

NOYB claims that LinkedIn's paywall for profile visitor data effectively forces EU users to pay for something the law says must be free. The group's founder Max Schrems called the policy 'absurd' in a statement: 'LinkedIn is using a supposed “data protection interest” as an argument to deny access to data that it happily sells to paying customers.'

The digital rights group has a strong track record. In 2025, NOYB’s complaints led to a €325 million ($381 million) fine against Google by France's privacy regulator, the CNIL, over its data collection and advertising practices.

Background

LinkedIn first introduced the 'Who's Viewed Your Profile' feature in 2007, allowing users to see a list of visitors. But in a move that predates the GDPR's 2018 enforcement, the platform paywalled the full visitor list, restricting it to paid subscribers. Free users can only see the last five visitors—provided those visitors haven't opted for anonymity.

According to NOYB, LinkedIn's current policy is contradictory. When a free user submits a formal Data Subject Access Request (DSAR) under GDPR to access their full visitor log, the company refuses, citing data protection—yet that same data becomes instantly accessible if the user pays for a Premium Career plan starting at €30/month ($40/month in the US). NOYB argues this proves the refusal is not based on genuine privacy concerns but on commercial incentives.

LinkedIn's Response

In a statement to TechCrunch, a LinkedIn spokesperson said: 'We are reviewing NOYB’s claims. Our 'Who's Viewed Your Profile' feature is designed to be opt-in for profile visitors, and we believe it balances the privacy rights of our members with the access rights of others.'

The company is likely to argue that under GDPR, the right of one user to know who viewed their profile must be balanced against the privacy rights of the other users. LinkedIn also points out that any user, free or paid, can toggle on anonymity via Settings > Visibility > Visibility when viewing other profiles—making each visit appear as from an 'Anonymous LinkedIn Member'.

What This Means

If NOYB wins, LinkedIn may be forced to make profile visitor data free for all EU users, potentially eroding its premium subscription value. This case could set a precedent for other platforms that commercialize access to personal data, including social media networks and professional networking services.

Legal experts say the Austrian ruling may have broader implications for how companies define 'personal data' versus 'commercial feature'. The case also highlights the tension between GDPR’s access rights and a company’s right to charge for unique functionalities. NOYB is calling for a fine to deter future violations, similar to its success against Google.

For now, free LinkedIn users in the EU remain unable to see the full list of who viewed their profile without paying. The outcome of this complaint will be closely watched by privacy advocates and tech companies alike.