YouTube Restricts Data Access While Claiming Openness

By Cliff Potts, CSO, and Editor-in-Chief of WPS News

Baybay City, Leyte, Philippines — May 10, 2026

Reporting

Under the Digital Services Act (DSA), very large online platforms are expected to provide vetted researchers with access to data necessary to study systemic risks. YouTube has publicly stated that it supports independent research and has expanded transparency initiatives in response to EU regulation.

In practice, meaningful data access remains limited.

EU-based researchers report long approval timelines, narrow data scopes, and technical constraints that prevent robust analysis of recommendation systems, visibility controls, and monetization impacts. Access is often restricted to pre-defined datasets that exclude variables needed to test platform claims. Requests to examine how changes affect specific languages, regions, or political topics are frequently denied or deferred.

While YouTube cites privacy and security concerns, the effect is consistent: independent verification of platform behavior is difficult or impossible.

Analysis

Transparency without access is a managed narrative.

By controlling which data can be studied and how it is delivered, YouTube determines the boundaries of permissible inquiry. Researchers can confirm what the platform already acknowledges, but they cannot test claims that matter most to public oversight—how recommendations amplify content, how visibility is adjusted, and how monetization decisions shape behavior.

This posture reflects incentives established at the parent-company level. Google treats core data flows as strategic assets. Opening them to external scrutiny risks exposing design choices that contradict public assurances. Limited access preserves reputational control while allowing the company to claim cooperation.

From a regulatory standpoint, this creates an asymmetry. Platforms possess comprehensive internal data. Regulators and researchers receive fragments. Oversight becomes dependent on platform-selected evidence rather than independent examination.

What Remains Unclear

YouTube does not publish clear criteria explaining which EU researchers qualify for data access, what datasets are available, or how long approvals should take. It also does not disclose how many requests are denied or narrowed, nor on what grounds.

Without these disclosures, it is impossible to assess whether data access obligations are being met in substance rather than in form.

Why This Matters

The DSA’s research access provisions were designed to reduce information asymmetry between platforms and the public. When access is constrained to safe or partial views, that asymmetry persists.

If regulators cannot rely on independent research to test platform claims, enforcement depends on self-reporting and after-the-fact investigation. That model has already failed to prevent repeated harm.

For EU oversight to function as intended, data access must enable scrutiny, not just symbolism. Until then, claims of openness remain unproven.

References (APA)

European Commission. (2024). Digital Services Act: Data access for vetted researchers.
European Digital Rights (EDRi). (2023). Opening the black box: Research access under the DSA.
AlgorithmWatch. (2022). Why platform data access matters for accountability.

#dataAccess #DigitalServicesAct #Google #platformTransparency #Research #YouTube

LinkedIn profile visitor lists belong to the people, says Noyb

유럽 개인정보보호법(GDPR) 제15조에 따라 LinkedIn 프로필 방문자 목록은 사용자에게 귀속된 데이터로, 무료 사용자도 자신의 방문자 데이터를 요청할 권리가 있다는 법적 논쟁이 진행 중이다. LinkedIn은 프리미엄 사용자에게만 방문자 정보를 상세히 제공하지만, EU 개인정보보호 단체 Noyb는 이 데이터 역시 무료 사용자에게도 제공되어야 한다고 주장한다. 이 사례는 데이터 접근권과 기업의 데이터 수익 모델 간의 경계에 대한 중요한 법적 선례가 될 가능성이 있다.

https://www.theregister.com/offbeat/2026/05/05/noyb-cries-foul-on-linkedin-withholding-profile-visitor-data/5225338

#gdpr #linkedin #privacy #dataaccess #eulaw

Noyb cries foul on LinkedIn withholding profile visitor data

: GDPR Article 15 doesn't care if you want to make money by selling users' data back to them

theregister
ICYMI: noyb files GDPR complaint over LinkedIn's paywall for profile visitor data: Privacy group noyb challenges LinkedIn for refusing to hand over profile visitor data free of charge while selling the same information through its Premium tier. https://ppc.land/noyb-files-gdpr-complaint-over-linkedins-paywall-for-profile-visitor-data/ #GDPR #Privacy #DataProtection #LinkedIn #DataAccess
noyb files GDPR complaint over LinkedIn's paywall for profile visitor data

Privacy group noyb challenges LinkedIn for refusing to hand over profile visitor data free of charge while selling the same information through its Premium tier.

PPC Land
Oh, look! Another riveting piece on transgender homicides, hidden behind the glorious barrier of #JavaScript and #cookies 🍪🔒. Because, naturally, the data on crimes can't be accessed without first proving you're not a bot 🦾. Who knew that the key to understanding societal violence was a cookie acceptance button? 🤦‍♂️
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6182901 #transgenderhomicides #dataaccess #societalviolence #onlineprivacy #HackerNews #ngated
Google Ads cuts granular data access to 37 months starting June 2026: Google Ads cuts granular reporting to 37 months from June 2026, reversing its 11-year policy and affecting the Google Ads API, scripts, and BigQuery pipelines. https://ppc.land/google-ads-cuts-granular-data-access-to-37-months-starting-june-2026/ #GoogleAds #DigitalMarketing #PPC #DataAccess #BigQuery
Google Ads cuts granular data access to 37 months starting June 2026

Google Ads cuts granular reporting to 37 months from June 2026, reversing its 11-year policy and affecting the Google Ads API, scripts, and BigQuery pipelines.

PPC Land

Isaac Levin hosts a Full-Day Workshop July 22nd at Nebraska.Code().

Check out 'A Little Bit of Everything – The Latest in ASP.NET Core' here: https://nebraskacode.amegala.com/

#ASPNET #ASPNETCore #WebDevelopment #API #RESTful #DataAccess #EntityFrameworkCore #Blazor #FrontEnd #Cloud #MicrosoftServices #Nebraska #WebApplications #webdeveloper #TechWorkshop #HandsOnLearning #technology #DOTNET

FYI: EU court's top adviser says data watchdogs must honor GDPR access requests: An EU Advocate General says data protection authorities qualify as data controllers under GDPR and cannot block subject access requests under national law. https://ppc.land/eu-courts-top-adviser-says-data-watchdogs-must-honor-gdpr-access-requests/ #GDPR #DataProtection #PrivacyRights #DataAccess #EURegulations
EU court's top adviser says data watchdogs must honor GDPR access requests

An EU Advocate General says data protection authorities qualify as data controllers under GDPR and cannot block subject access requests under national law.

PPC Land
EU court's top adviser says data watchdogs must honor GDPR access requests: An EU Advocate General says data protection authorities qualify as data controllers under GDPR and cannot block subject access requests under national law. https://ppc.land/eu-courts-top-adviser-says-data-watchdogs-must-honor-gdpr-access-requests/ #GDPR #DataProtection #PrivacyRights #DataAccess #EURegulations
EU court's top adviser says data watchdogs must honor GDPR access requests

An EU Advocate General says data protection authorities qualify as data controllers under GDPR and cannot block subject access requests under national law.

PPC Land

🏆Unlocking access to large-scale research data

With cloud infrastructure at the Leibniz Supercomputing Centre, external users can directly access and analyze data where it is stored, with no need to move massive datasets. A practical step toward more accessible and reusable research.

Contributed by @nfdi4ing

#ResearchData #OpenScience #FAIRdata #CloudComputing #DataAccess #NFDI #NFDI4ING