personalised ads

CJEU C-446/21 Schrems (Communication of data to the general public)

members – 5 min read

UPDATED: No big surprises, nor new big takeaways, but this ruling sparks questions around 'strictly necessary' and 'purpose'. Ruling: Facebook can't indiscriminately use personal data on or off their platform for personalised ads, without restricting the duration and type of data.

Dec 8, 2024

🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising

members – 2 min read

UPDATE 21 Nov: Key statement from DPC! 👇 6 years after a complaint, the DPC finds that LinkedIn breached the lawfulness (lacking both consent, legitimate interest AND contractual necessity), fairness and transparency principles. Result: reprimand, order to rectify violations + €310 million fine.

Nov 21, 2024

My Meta Pay or Okay experience - now they're cutting the price with 40%

members – 5 min read

Latest: Meta reduces sub prices and offers new free choice with less personalised ads, claiming it "goes beyond what is required in the law". 💸 And gets huge fines: €797.72m from the 🇪🇺 EC for antitrust violations and $25.4m from 🇮🇳 India's competition authority for 2021 privacy notice failures.

Nov 15, 2024

CJEU C-252/21 Meta Platforms and Others (General terms of use of a social network)

members – 6 min read

The 'Meta Bundeskartellamt' ruling: Legal bases are interpreted stricter and while you might rely on legitimate interest for direct marketing, network security or product improvement, processing personal data must be *strictly* necessary (but is it correctly applied? 🤔)

Nov 13, 2024

Grindr NOK 65m fine upheld in Norway (again)

members – 2 min read

The Oslo District Court ruled in favour of the state on all points, after Grindr sued the authorities after the Privacy Appeals Board fully upheld the DPA's decision, including the NOK 65m record fine. Preliminary win, but expect an appeal.

Jul 5, 2024

EDPB's controversial ‘Consent or Pay’ Opinion is here

members – 2 min read

[Updated 24 April with highlighted file + 🎙️] Is the EDPB trying to "rewrite the entire economic model of Big Tech and the adtech industry in the EU"? 🤔 Controversial Opinion just published!

Apr 24, 2024

CJEU C-604/22 IAB Europe TC String

members – 6 min read

IAB Europe is a joint controller and because their 'TC String' contains data about an identifiable user, it's personal data.

Mar 18, 2024

Norway DPA warns site tracking investigations 🧐

members – 2 min read

⏰ Datatilsynet will soon start investigating non-compliant tracking technologies. If you use Meta Pixel or similar, it's time for website due diligence!

Dec 21, 2023

EDPB publishes Urgent Binding Decision regarding Meta

members – 1 min read

NB! This post was updated later with two key items: the actual EDPB decision and the DPC's Enforcement notice.

Dec 7, 2023

The EDPB extends the Meta ban to the entire EEA permanently

members – 2 min read

The EDPB makes the Norwegian DPA's ban on Meta's behavioural advertising on Facebook and Instagram permanent and extends it to the entire EEA

Oct 31, 2023

Norway DPA clarifies on Meta advertising

members – 1 min read

…

Oct 13, 2023

Denmark DPA fine for using Google and Meta cookies illegally

members – 1 min read

…

Oct 6, 2023