Austrian advocacy group Noyb alleges BeReal is breaching GDPR by repeatedly pushing users to share personal data.
BeReal, once celebrated for its authentic, real-time approach to social media, is now facing serious privacy concerns. Austrian privacy rights group Noyb (None of Your Business) has lodged a formal complaint against BeReal, claiming the platform employs manipulative consent practices that violate the General Data Protection Regulation (GDPR).
The crux of Noyb’s complaint is a persistent data consent banner that behaves differently based on user choice. If users accept data tracking for personalized advertising, the banner disappears. However, if they refuse, the banner reappears daily, creating an annoying user experience. The complaint, filed with France’s CNIL (Commission Nationale de l’Informatique et des Libertés), follows BeReal’s acquisition by French company Voodoo in June 2024. The controversial consent practice reportedly began in July.
In their filing, Noyb argues that BeReal’s approach effectively pressures users into surrendering their data. “Consent given under these circumstances is not freely given, which means it doesn’t meet the requirements established in Article 4(11) GDPR,” the group asserts. Noyb is demanding that the CNIL impose fines on BeReal and ensure the platform’s compliance with GDPR standards.
The European Data Protection Board (EDPB) has already condemned such methods. In 2023, the EDPB published guidelines highlighting that repeated prompts are a form of deceptive design. “Users are likely to end up giving in, as they are wearied from having to refuse the request each time they use the platform,” the EDPB noted.
The outcome of this complaint could have broad implications for platforms that rely on similar consent strategies. For now, BeReal’s once-celebrated authenticity is being overshadowed by concerns about user manipulation and privacy violations.
Get in Touch 
