As reported by the Wall Street Journal, Meta (Facebook and Instagram) is switching from an illegal contract to an equally illegal basis “legitimate interests” for advertisement, after noyb won a series of complaints against them. noyb will take imminent action, as case law and guidance does not allow a company to argue that its interests in profits override the users’ right to privacy.
Background. The GDPR allows the processing of personal data if a company complies with at least one of the six legal basis in Article 6 GDPR. Most of these six options are irrelevant for advertisement. While most companies require users to consent (“opt-in”) for the use of personal data for advertisement, Meta (Facebook and Instagram) has tried to bypass this requirement by arguing that the use of personal data for ads is “necessary under the contract” when the GDPR became applicable in 2018. noyb instantly filed a series of complaints and ultimately won them before the European Data Protection Board (EDPB) in December 2022. Meta had until April to stop the practice.
One illegal practice replaced by next illegal practice. Now, Meta announced to give in against the pressure by noyb, but instead of switching to an “opt-in” system, like Google or Microsoft, they now try to argue the next unlawful option, by claiming that their “legitimate interest” to process user data would override the fundamental right to privacy and data protection of users. This was tried by other companies before, but rejected by the regulators multiple times (see e.g. the Italian DPA on TikTok or the Belgian DPA on the IAB TCF at para 441).
See more at noyb.eu
