Noyb sues Whitebridge AI over alleged illegal sale of personal data
Noyb, an Austrian civil society organization, has sued Whitebridge AI in Lithuania, alleging the company illegally collects and sells sensitive personal data through AI-generated reputation reports. The reports reportedly extract data from social media and search engines, and infer information about individuals' personality traits, political views, religion, and criminal history. The lawsuit alleges violations of the General Data Protection Regulation.
What happened
Noyb, an Austrian non-profit organization, filed a lawsuit in Lithuania on 29 September 2025 against Whitebridge AI, alleging the company collects sensitive personal data and sells it illegally through AI-generated reputation reports. The reports extract data automatically from social media platforms and search engines, and include AI-inferred information such as personality traits, political opinions, religion, and criminal history. Two complainants paid for reports about themselves and found they contained warnings about 'sexual nudity' and 'dangerous political content', but their requests for correction were not answered.
Reported impact
Noyb stated that the quantity of personal data processed by Whitebridge AI is concerning, as the company itself admits in its advertising. The company offers customers 'the ability to know everything about any person online', including themselves. Noyb characterized Whitebridge AI's business model as 'dubious, based on public fear and ignorance of digital rights'.
Index analysis
The lawsuit alleges multiple violations of the General Data Protection Regulation concerning data processing, individuals' rights of access to their data, and rights to correction. Noyb notes that every European has the right to access their personal data for free, but Whitebridge AI reportedly did not respond to such requests.
Governance controls
Noyb called on the Lithuanian Data Protection Authority to compel Whitebridge AI to provide access to personal data, halt illegal data processing, and impose a fine.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.