Data Rights vs. Paywalls: The Battle Over LinkedIn's Profile Visitor Lists

The intersection of data privacy laws and subscription-based business models has created a new legal battlefield. At the center of a recent controversy is the non-profit organization Noyb (None of Your Business), which has taken aim at LinkedIn for withholding profile visitor data from its users unless they pay for a Premium subscription.

This conflict highlights a fundamental tension in the modern web: is the record of who interacts with your digital presence "your" personal data under the law, or is it a proprietary feature of the platform providing the service?

The Core Dispute: GDPR and the Paywall

Noyb argues that the list of people who visit a user's LinkedIn profile constitutes personal data that belongs to the user. Under the General Data Protection Regulation (GDPR), EU citizens have the right to access their personal data. By restricting this information to paying subscribers, LinkedIn is effectively locking a legal right behind a paywall.

According to reports, LinkedIn rejected data requests on the grounds that protecting the privacy of the visitors took precedence over the user's right to know who viewed their profile. However, critics point out a glaring contradiction: LinkedIn is willing to "protect" this data for free users, but will happily reveal it to those who pay for a Premium account. This suggests that the data is accessible and the "protection" is a monetization strategy rather than a privacy safeguard.

Community Perspectives: Who Owns the Interaction?

The debate has sparked significant discussion among technical and legal observers, with opinions split on the nature of "personal data."

The Argument for User Ownership

Some argue that the interaction—the act of visiting a profile—creates a data point that is inextricably linked to the profile owner's experience. From this perspective, knowing who is engaging with your professional brand is a critical piece of personal information.

The Counter-Argument: Visitor Privacy

Conversely, many question whether the identity of a visitor should be considered the "data" of the profile owner. One commenter noted the logical leap required to support Noyb's claim:

"If I accidentally click on your profile you're entitled to my name and employer and that's your data now? Makes no sense..."

This line of reasoning suggests that the visitor's identity is the visitor's personal data, and revealing it to the profile owner without the visitor's explicit consent (or a platform-wide agreement) could actually be a violation of GDPR rather than a fulfillment of it.

The "Engineered Scarcity" of SaaS

Beyond the legalities of GDPR, the situation has opened a broader critique of the Software-as-a-Service (SaaS) business model. The controversy highlights how platforms often create "artificial scarcity" to drive revenue.

As one observer pointed out, the data regarding profile visitors is already collected and stored by LinkedIn for every single user. Instead of the cost of the feature being the data collection itself, the cost is the "restriction layer" built to hide that data. In this model, companies spend engineering resources to sabotage a naturally abundant feature, then charge users to undo that sabotage.

Broader Implications for Social Platforms

This issue is not unique to LinkedIn. Similar dynamics exist in dating apps, where seeing who "liked" or "swiped right" on a profile is frequently a premium feature. While the stakes in a professional context (LinkedIn) may differ from a romantic one (Tinder), the underlying mechanism is the same: the monetization of social visibility.

Furthermore, the case raises concerns about the security implications of such data. Some users view LinkedIn as a "premium database for spear-phishing," where the visibility of network layouts and professional connections makes users prime targets for social engineering attacks.

Conclusion

The clash between Noyb and LinkedIn is more than a dispute over a specific feature; it is a test case for how data access rights are interpreted in the age of the paywall. If Noyb succeeds, it could force a paradigm shift in how social networks monetize user interactions, potentially ending the practice of selling access to data that is legally defined as belonging to the user.