Skip to content

Corruption Ledger

The Public Ledger of Corruption

  • Home
  • About CL
  • Rumble
  • Video
  • corruption
    • corporate corruption
    • government corruption
    • leaks
    • Misinformation
    • Surveillance
  • cryptocurrency
  • Sanctions Feeds
    • All Sanctions Feeds
    • Canadian Sanctions
    • US Sanctions
  • Toggle search form

EU & Ireland: Meta’s legal basis for targeted ads found to breach GDPR

Posted on January 10, 2023January 18, 2023 By CorruptionLedger No Comments on EU & Ireland: Meta’s legal basis for targeted ads found to breach GDPR
Ireland’s Data Protection Commission (DPC) announced on January 4, 2023, that it has fined Meta a total of €390 million after finding that the company’s Facebook and Instagram platforms lacked proper legal grounds for processing millions of Europeans’ personal data for targeted advertising.

In addition to posing challenges for Meta’s business model, the DPC’s two decisions reflect growing disagreement among European data protection authorities (DPAs) on two fronts.  The first relates to the use of ‘contractual necessity’ as an appropriate legal basis under the GDPR for providing personal advertisements.  The second involves the legal authority of the European Data Protection Board (EDPB) to order DPAs to bring new investigations.

While we await the full decision of the DPC and EDPB, in this blog post we set out the key facts related to these cases and outline our initial takeaways.

Background

In advance of the GDPR’s effective date on May 25, 2018, Meta changed the Terms of Service for its Facebook and Instagram services.  In contrast to its previous reliance on the consent of users, the company sought to use ‘contractual necessity’ as the lawful basis for processing users’ personal data under the GDPR.

Meta took the position that, upon accepting the updated Terms of Service, the user entered into a contract with the company.  Meta considered that its processing of the user’s data to provide personalized advertising in connection with the delivery of its Facebook and Instagram services was necessary to its performance of that contract.

Once the GDPR went into effect, two EU complainants alleged that Meta was still relying on consent as the lawful basis for its processing of user data.  They argued that by conditioning its Facebook and Instagram services on acceptance of the updated Terms of Service, Meta was effectively “forcing” users to consent to such processing for personalized advertising.

  • Draft DPC Decision

In its subsequent draft decisions, the DPC made two key findings.  As an initial matter, it held that, by not outlining clearly to users its legal basis for processing personal data, Meta had violated its transparency obligations and its obligation to process personal data in a lawful, fair and transparent manner under the GDPR.  The DPC claims in its press release that it proposed “very substantial fines” on Meta in relation to these breaches, which is understood to have been between €28 million and €36 million.

Importantly, however, the DPC sided with Meta in concluding that the GDPR did not preclude the company from relying on ‘contractual necessity’ as an appropriate legal basis for processing the data needed to provide personalized advertisements.  In the view of the DPC, Meta’s provision of personalized advertising was central to the bargain struck between users and the company’s Facebook and Instagram services.

Thereafter, 10 DPAs from across Europe contested the determination in the DPC’s draft decisions that Meta should be able to rely on the ‘contractual necessity’ legal basis.  According to the concerned DPAs, Meta’s delivery of personalized advertising was not necessary to the company’s provision of its Facebook and Instagram services to users. In their view, the contract with users contained certain core elements and the delivery of personal advertising could not be said to be necessary to perform that much more limited form of contract.

  • EDPB Binding Decision

On December 5, 2022, the EDPB issued a binding determination on the dispute between the DPC and its peer DPAs.  In partially reversing the DPC’s draft decision, the EDPB found that Meta was not entitled to rely on the ‘contractual necessity’ legal basis.  In addition, the EDPB ordered the DPC to conduct a new investigation into all of Facebook’s and Instagram’s data processing operations.

In its final decisions on December 31, 2022, the DPC incorporated the EDPB’s binding determination that Meta’s reliance on the ‘contractual necessity’ legal basis to process users’ data violated the GDPR.[1]  In announcing those final decisions on January 4, 2023, however, the DPC characterised the EDPB’s order to initiate a new “open-ended and speculative investigation” of Meta as overreach. The DPC noted that this direction is not included in its decisions and indicated that it will bring an annulment action before the Court of Justice of the EU to set aside this element of the EDPB’s ruling.

Next Steps & Implications

  • The future of ‘contractual necessity’ for personalized advertising

Following the DPC’s decisions, Meta announced its intention to appeal both the substance of the decisions and the fines imposed thereunder.  As a result, the issue of whether ‘contractual necessity’ constitutes an appropriate legal basis for personalized advertising is certain to be litigated for years to come.

  • Alternative legal basis for personalized advertising

The DPC’s final decisions require Meta to bring Facebook’s and Instagram’s processing operations into compliance within three months, however, Meta’s stated intention to appeal the decision means that it may continue to rely on the same approach to legal basis pending the final determination of an appellate process.  As the decisions did not prohibit personalized advertising on the two platforms, Meta could potentially pivot to another available legal basis under GDPR, such as consent or ‘legitimate interest.’  As a general matter, ‘legitimate interest’ tends to be an appropriate ground when companies process personal data in a way users would reasonably expect; however, where legitimate interest is relied upon, users have the right under GDPR to object to processing. This right to object would potentially undermine Meta’s ability to conduct personalized advertising on all of its users if it elected to rely on this legal basis instead of ‘contractual necessity’.

  • The EDPB’s legal authority to order investigations

Finally, an action to annul part of the EDPB’s determination before the Court of Justice of the European Union would mark the DPC’s first legal challenge of the Board’s directions.  The DPC’s claim would hinge on whether the EDPB—a body charged with resolving disputes between DPAs and ensuring the consistent enforcement of the GDPR across the EU—has the legal authority to order DPAs to bring new investigations.

  • Wider Implications of the Decision

While the fine imposed is eye-catching and continues a trend of increased enforcement by the DPC in the course of the past year, the potential commercial implications of this decision for Meta and other businesses relying on digital platforms are more significant than a mere fine. As noted in a previous post, Meta suffered a significant 6.2% fall in share price on the day that the position of the EPDB in these cases was reported on. Following this decision, it will be increasingly difficult for Meta to justify its existing approach: providing personalized ads to all of its users without any option to opt-out. This business model has been a crucial driver of growth and revenue at Meta and for many other digital platforms. The anticipated appeal by Meta will be closely observed by many and we will continue to provide our comments as it progresses.

If you have questions or need additional information, please contact one of the authors and/or your DLA Piper relationship attorney.

[1] A third DCP decision regarding Meta’s WhatsApp service is due imminently.  Unlike the Facebook and Instagram decisions, however, the DPC’s WhatsApp inquiry concerned the lawfulness of Meta’s processing of personal data for the purpose of improving services.

. . . . . . . . . . . . .

  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Telegram (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
surveillance & privacy Tags:DLAPiper

Post navigation

Previous Post: China halts short-term visas in South Korea in first response to COVID curbs
Next Post: U.S. Supreme Court considers narrowing federal protections for unions

Related Posts

  • Meta Fined €390 Million by Irish DPC for Alleged Breaches of GDPR, Including in Behavioral Advertising Context surveillance & privacy
  • Canadian PM asked to hand over secret information re unprecedented use of the Emergencies Act anti-government resistance
  • Young Ukrainian escapes war with USB stick holding 40% of life savings in #Crypto cryptocurrency
  • Bill Gates calls for global surveillance for pandemic threats, and Gates would be in charge health corruption
  • Mark Zuckerberg-Backed Byju’s Accused Of Buying Children’s Data and Threatening Parents crime
  • Ocenture LLC and Carelumina LLC Settle Allegations of Kickbacks, Genetic Testing Fraud Scheme health corruption

Comment Cancel reply

  • Glenn Greenwald: Revealed – Mass Media Complicity in “Russian Disinformation” Fraud, w/ Matt Taibbi | SYSTEM UPDATE #30January 30, 2023
  • Reports of drone attacks in Iran and SyriaJanuary 29, 2023
  • AP: Ukraine Corruption Scandal; U.S. likely to OK sending Abrams tanksJanuary 29, 2023
  • Classified documents probe pushes Biden think tank into spotlightJanuary 29, 2023
  • British PM Sunak fires party chairman over tax bill allegationsJanuary 29, 2023
  • North Korea calls U.S. pledge of tanks to Ukraine ‘unethical crime’January 28, 2023
  • Usain Bolt fires business manager over Jamaica fraud caseJanuary 27, 2023
  • Canada’s Supreme Court gives mixed rulings on gun crime penaltiesJanuary 27, 2023
  • China, U.S. spar at WTO meeting over disputesJanuary 27, 2023
  • David J. Miller and Minnesota Independent Cooperative, Inc., Convicted in Multi-Million-Dollar Prescription Drug Diversion SchemeJanuary 27, 2023
  • Philippines to appeal ICC resumption of drug war probe: Thousands deadJanuary 27, 2023
  • Turkey says Sweden complicit in hate crime, NATO talks pointlessJanuary 26, 2023
  • Five Members and Associates of White Supremacist Gang Sentenced to Life in Prison for Racketeering, Kidnapping, and MurderJanuary 26, 2023
  • Justice Department Finds Louisiana Department of Public Safety and Corrections Violates the Constitution By Incarcerating People Beyond Their Release DatesJanuary 25, 2023
  • Four Men Convicted of Engaging in a Child Exploitation EnterpriseJanuary 25, 2023
  • AP: Twitter faces lawsuits over unpaid rent for HQ offices in U.S., UKJanuary 24, 2023
  • U.S. Justice Department sues Google over digital advertising dominanceJanuary 24, 2023
  • Defence minister won’t say whether Canada is willing to send battle tanks to UkraineJanuary 23, 2023
  • Norway detains former top Wagner Group member seeking asylum, Andrey MedvedevJanuary 23, 2023
  • Finance companies and their directors fined for misconductJanuary 23, 2023
  • anti-government resistance
  • corruption
  • crime
  • dimwit crimes
  • economy
  • human rights
  • investigations
  • leaks
  • misinformation & censorship
  • political unrest
  • regulatory
  • sanctions
  • surveillance & privacy
  • war
  • who cares?

Corruption Ledger Follow

The Public ▇▇▇ Ledger of ▇▇▇ Corruption. https://t.co/wkobrEotQR

5amResearch
Corruption Ledger @5amresearch ·
3h

Cryptome content is reliable. Why is their @Twitter account permanently banned, however? https://twitter.com/Cryptome_org @Cryptome_org

Alex @Alex06944477

@MsQuitoSwarm @YouTube This seems to be legit, i read about the CIA-Operation "Aerodynamic" on the heise online german news platform
https://cryptome.org/2016/01/cia-ua-aerodynamic.pdf

Reply on Twitter 1622040205074075652 Retweet on Twitter 1622040205074075652 Like on Twitter 1622040205074075652
Retweet on Twitter Corruption Ledger Retweeted
System Update @systemupdate_ ·
2 Feb

.@RepMTG on protecting whistleblowers like Snowden & Assange:

“When a govt. is trying to stop the truth from being told… that’s something to pay attention to… We have to do everything we can to protect those whistleblowers who are risking their lives to tell the truth.”

Reply on Twitter 1621266228009394179 Retweet on Twitter 1621266228009394179 118 Like on Twitter 1621266228009394179 485
Retweet on Twitter Corruption Ledger Retweeted
Corruption Ledger @5amresearch ·
31 Jan

The most uplifting news in ages: #France brings new meaning to "Power to the People" - unionized energy workers give free power to low income people, cut off electricity for the powerful. #vivelafrance https://www.france24.com/en/europe/20230127-robin-hood-energy-strikers-give-free-power-to-french-schools-hospitals-low-income-homes

Reply on Twitter 1620285867926622208 Retweet on Twitter 1620285867926622208 3 Like on Twitter 1620285867926622208
Corruption Ledger @5amresearch ·
31 Jan

The most uplifting news in ages: #France brings new meaning to "Power to the People" - unionized energy workers give free power to low income people, cut off electricity for the powerful. #vivelafrance https://www.france24.com/en/europe/20230127-robin-hood-energy-strikers-give-free-power-to-french-schools-hospitals-low-income-homes

Reply on Twitter 1620285867926622208 Retweet on Twitter 1620285867926622208 3 Like on Twitter 1620285867926622208
Load More
  • UK government webinar on Russia trade sanctions & commercial services
    EU Sanctions - UK 1 day ago
  • US designates international sanctions evasion network
    EU Sanctions - UK 1 day ago
  • Security Council ISIL (Da'esh) and Al-Qaida Sanctions Committee Amends 29 Entries to Its Sancti...
    UN.org 2 days ago
  • Canada Amends Myanmar Sanctions: 6 Individuals Targeted and New Prohibition on Aviation Fuel
    Baker Mckenzie - Canada 2 days ago
  • Oil Price Cap Update: Refined Products
    OFSI 2 days ago
  • United States: Government Designates Russian Proxy Wagner Group as a Significant Transnational Crimi...
    Sanctions – Global Compliance News 2 days ago
  • Ukraine introduces a new set of sanctions against Russian and Belarusian companies
    Baker McKenzie UK 2 days ago
  • United States: OFAC issues amended Russia-related General Licenses and related FAQs
    Sanctions – Global Compliance News 2 days ago
  • Oil broker arrested over supply of 18,000 tonnes of diesel to North Korea
    EU Sanctions - UK 3 days ago
  • Switzerland implements the 9th package of EU sanctions against Russia
    Baker Mckenzie US 3 days ago
  • Statement by Minister Ng on U.S. request for dispute settlement panel on tariff rate quotas for Cana...
    Canada.ca 4 days ago
  • UK, US & Canada impose sanctions to mark anniversary of Myanmar coup
    EU Sanctions - UK 4 days ago
  • US Government Designates Russian Proxy Wagner Group as a Significant Transnational Criminal Organiza...
    Baker McKenzie UK 5 days ago
  • UK Court judgment on the impact of sanctions on litigation / judgments involving designated persons;...
    EU Sanctions - UK 5 days ago
  • Japan introduces further sanctions against Russia
    Baker Mckenzie US 5 days ago
  • AP: Ukraine Corruption Scandal; U.S. likely to OK sending Abrams tanks
    JapanToday 6 days ago
  • Classified documents probe pushes Biden think tank into spotlight
    JapanToday 6 days ago
  • British PM Sunak fires party chairman over tax bill allegations
    JapanToday 6 days ago
  • North Korea calls U.S. pledge of tanks to Ukraine 'unethical crime'
    JapanToday 7 days ago
  • OFAC Issues Amended Russia-Related General Licenses and Related FAQs
    Baker McKenzie UK 7 days ago
1
2
3
…
Next

–

  • Register
  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
  • Kremlin says Biden, Zelenskyy ignoring Russia’s concerns investigations
  • Russia cuts off more gas supplies to Europe corporate corruption
  • Eight Individuals Charged in Alleged $30 Million Unemployment Benefits Scheme corruption
  • #JKSSB alleged job scam site: 14 locations raided, arrests made corruption
  • North Korea calls U.S. pledge of tanks to Ukraine ‘unethical crime’ corporate corruption
  • Medical Device Company Zyno Medical LLC Agrees To Pay Nearly $500,000 To Resolve False Claims Act Allegations Relating to Defective Medical Device health corruption

Copyright © 2022 Corruption Ledger. This web site contains no ads.