LinkedIn Illegal Block on Free Accounts’ Profile Viewer Data Sparks GDPR Lawsuit

By Linda Park, Tech Editor | May 8, 2026 | San Francisco

A legal challenge has been launched against LinkedIn in an Austrian court, accusing the professional networking platform of illegally restricting free users’ access to their profile visitor data under the European Union’s General Data Protection Regulation (GDPR). The complaint, filed by the digital rights group None of Your Business (NOYB), argues that LinkedIn’s premium-only access to the “Who Viewed Your Profile” feature violates GDPR Article 15, which guarantees individuals the right to access their personal data.

This isn’t the first time NOYB has taken on major tech companies over data practices. In 2025, the group successfully pushed for a €325 million ($381 million) fine against Google by the French data protection authority CNIL for similar violations [CNIL ruling]. The LinkedIn case represents a growing trend of privacy advocates challenging how tech platforms monetize user data.

The Contradiction at the Heart of the Case

LinkedIn introduced its profile visitor tracking feature around 2007, initially offering it to all users. The platform later made this functionality a premium feature, requiring users to subscribe to LinkedIn Premium Career plans starting at €30 per month ($40 per month in the US) to access the complete list of profile visitors.

Here’s the crux of NOYB’s argument: Under GDPR, EU citizens have the right to access their personal data through formal Data Subject Access Requests (DSARs). When free users submit such requests for their profile visitor data, LinkedIn refuses access, citing “data protection” concerns. Yet the same data becomes available instantly to paying subscribers.

“This proves particularly absurd that LinkedIn is using a supposed ‘data protection interest’ as an argument to deny the right of access to data under the GDPR,” NOYB stated in its complaint.

The digital rights group maintains LinkedIn’s policy creates an impossible contradiction: Either the profile visitor data should be accessible to no one, or—since users are informed their visits are being tracked—it should be available to all under GDPR’s access rights. Currently, LinkedIn appears to be taking the first option for free users while offering the second to paying subscribers.

LinkedIn’s Defense and Legal Challenges Ahead

LinkedIn has already begun preparing its defense. In a statement to the Austrian Data Protection Authority, a spokesperson claimed “This assertion is false. Not only is it incorrect that only Premium members can see who has viewed their profile, but we also satisfy GDPR Article 15 by disclosing the information at issue via our Privacy Policy.”

The platform will likely argue that:

• Free users can opt out of having their profile visits recorded in Settings
• All users can see their last five visitors if those visitors haven’t enabled anonymity
• The rights of profile owners to know who viewed them must be balanced against visitors’ privacy rights

Legal experts suggest LinkedIn’s position will be difficult to defend. Helen Brain, partner at Square One Law in the UK, noted:

“NOYB appears to have a strong argument that LinkedIn is breaching GDPR in one way or the other. The case hinges on whether profile visits constitute ‘personal data’ under GDPR that should be accessible to the profile owner, or whether LinkedIn can legitimately restrict this access to paying subscribers.”

If NOYB prevails, the Austrian Data Protection Authority could impose significant fines. The potential outcomes include:

• LinkedIn being ordered to make profile visitor data available to all EU users free of charge
• LinkedIn being forced to eliminate the premium feature entirely
• LinkedIn finding new ways to gain consent for data sharing while maintaining its monetization model

Broader Implications for Tech Platforms

This case could have significant repercussions for how tech companies monetize user data. Many platforms use similar “data as a feature” models to incentivize premium subscriptions. The outcome may force companies to:

• Re-evaluate how they collect and disclose user interaction data
• Potentially restructure their premium offerings to comply with GDPR
• Face increased scrutiny over data practices from regulators and privacy advocates

For LinkedIn users, the case raises important questions about data ownership and corporate transparency. While the platform currently allows free users to see their last five visitors (when visitors haven’t opted for anonymity), the complete visitor list remains locked behind paywalls—a practice NOYB argues is fundamentally at odds with EU data protection laws.

What Happens Next?

The Austrian Data Protection Authority will now review the complaint and LinkedIn’s response. Legal proceedings could take several months, with potential hearings scheduled in late 2026 or early 2027. The authority may:

• Issue a preliminary ruling on whether LinkedIn’s policy violates GDPR
• Order LinkedIn to change its data access practices
• Impose fines if violations are confirmed

For now, EU users who wish to access their complete profile visitor data would need to either:

1. Subscribe to LinkedIn Premium (€30/month)
2. File a formal DSAR with LinkedIn (which currently gets denied)
3. Wait for the legal outcome of this case

Key Takeaways

• Legal basis: The case hinges on GDPR Article 15, which guarantees EU citizens access to their personal data
• Current LinkedIn policy: Free users get limited visitor data; paying subscribers get full access
• NOYB’s position: Either all users should have access or none should, arguing the current system is illegal
• Potential outcomes: Fines, forced policy changes, or new consent mechanisms
• Broader impact: Could force tech platforms to rethink how they monetize user interaction data

This developing story will have significant implications for both LinkedIn users and tech companies worldwide. What do you think about LinkedIn’s current policy? Should profile visitor data be available to all users? Share your thoughts in the comments below.

For the latest updates on this case, monitor:

• The Austrian Data Protection Authority
• NOYB’s official statements
• LinkedIn’s legal updates