Meta has had a blow dealt to its business model by an EU decision that could force the Instagram and Facebook owner to ask users to “opt-in” to having their data used for personalised ads.
Ireland’s Data Protection Commission (DPC) has fined Meta a total of €390m (£343m), after the EU’s data authority rejected the company’s argument that users agree to receive ads based on their personal data when they enter into a “contract” with its social media platforms via the terms and conditions they sign.
A core part of the Facebook and Instagram business model is compiling profiles of users from their online activity, which enables advertisers to target people based on details such as their hobbies, consumer behaviour and location.
The DPC had initially backed Meta’s legal argument that the “contract” approach did not breach the EU’s general data protection regulation (GDPR), but it said on Wednesday it had to follow the binding recommendations of the EU’s European Data Protection Board.
However, the DPC, which has regulatory power over Mark Zuckerberg’s empire because Meta’s EU base is in Dublin, added that it was seeking a court ruling against a further EDPB demand that it investigate all of Facebook and Instagram’s data processing operations.
The privacy campaign group Noyb, which triggered the decision after lodging complaints against Meta, said the outcome was a “huge” financial blow to the company, which relied on advertising for 98% of its $118bn (£98bn) turnover in 2021. Max Schrems, the honorary chair of Noyb, said Facebook and Instagram users in the EU would now need to be asked whether they wanted their data to be used for ads.
“This is a huge blow to Meta’s profits in the EU,” he said. “People now need to be asked if they want their data to be used for ads or not. They must have a ‘yes or no’ option and can change their mind at any time. The decision also ensures a level playing field with other advertisers that also need to get opt-in consent.”
The DPC has given Meta three months to bring its data processing operations into compliance with the decision. Meta has been contacted for comment.
Meta’s advertising-based business model is already under pressure after Apple introduced a privacy change that required app developers to seek user permission to track their online activity in order to serve them personalised ads.
