Austria’s data protection authority said Friday that it has ordered YouTube to comply with European Union (EU) regulations and respond to requests by users for access to data that it holds on them.

In 2019, prominent Austria-based privacy campaign group Noyb (None of Your Business) lodged complaints against eight online streaming services, including YouTube and Netflix, accusing them of “structural violations” of EU data regulations.

The complaint against YouTube was filed on behalf of an Austrian user with the country’s Data Protection Authority.

The regulator confirmed to AFP on Friday that it had “issued a decision... against Google LLC (YouTube)” regarding the suit brought by Noyb.

In their complaints, Noyb said the services violated the EU’s landmark General Data Protection Regulation by not granting users access to data that companies store on them or information about how the data is used.

Google, which owns YouTube, “now has four weeks to comply with the decision but also has the option to appeal it”, the NGO said in a statement Friday.

Noyb called the authority’s decision a “win” but regretted that it took the country’s regulator “five and a half years.”

“Making an access request should enable (users) to exercise... rights, such as the right to erasure or rectification” of their data, the group said, but due to delays that “becomes impossible.”