Urgent Binding Decision on processing of personal data for behavioural advertising by Meta
On 27 October, the European Data Protection Board (EDPB) adopted an urgent binding decision instructing the Irish (IE) DPA as lead supervisory authority (LSA) to take, within two weeks, final measures regarding Meta Ireland Limited (Meta IE) and to impose a ban on the processing of personal data for behavioural advertising on the legal bases of contract and legitimate interest across the entire European Economic Area (EEA).
The urgent binding decision followed a request from the Norwegian Data Protection Authority (NO DPA) to take final measures in this matter that would have effect in the entire European Economic Area (EEA).
The ban on processing
will become effective one week after the notification of the final measures by
the IE SA to the controller.
The Irish DPC has notified Meta on 31/10 about the EDPB Urgent Binding
Decision.
The EDPB takes note of Meta's proposal to rely on a consent based approach as
legal basis, as it was reported on 30/10. The Irish DPC is currently evaluating
this together with the Concerned Supervisory Authorities (CSAs).
EDPB Chair Anu Talus said: “After careful consideration, the EDPB considered it necessary to instruct the IE SA to impose an EEA-wide processing ban, addressed to Meta IE. Already in December 2022, the EDPB Binding Decisions clarified that contract is not a suitable legal basis for the processing of personal data carried out by Meta for behavioural advertising. In addition, Meta has been found by the IE SA to not have demonstrated compliance with the orders imposed at the end of last year. It is high time for Meta to bring its processing into compliance and to stop unlawful processing.” (source: edpb.europa.eu/photo:freepik.com)
Comments
Post a Comment