Urgent Binding Decision on processing of personal data for behavioural advertising by Meta

On 27 October, the European Data Protection Board (EDPB) adopted an urgent binding decision instructing the Irish (IE) DPA as lead supervisory authority (LSA) to take, within two weeks, final measures regarding Meta Ireland Limited (Meta IE) and to impose a ban on the processing of personal data for behavioural advertising on the legal bases of contract and legitimate interest across the entire European Economic Area (EEA).

The urgent binding decision followed a request from the Norwegian Data Protection Authority (NO DPA) to take final measures in this matter that would have effect in the entire European Economic Area (EEA).

The ban on processing will become effective one week after the notification of the final measures by the IE SA to the controller.
The Irish DPC has notified Meta on 31/10 about the EDPB Urgent Binding Decision.
The EDPB takes note of Meta's proposal to rely on a consent based approach as legal basis, as it was reported on 30/10. The Irish DPC is currently evaluating this together with the Concerned Supervisory Authorities (CSAs).

EDPB Chair Anu Talus said: “After careful consideration, the EDPB considered it necessary to instruct the IE SA to impose an EEA-wide processing ban, addressed to Meta IE. Already in December 2022, the EDPB Binding Decisions clarified that contract is not a suitable legal basis for the processing of personal data carried out by Meta for behavioural advertising. In addition, Meta has been found by the IE SA to not have demonstrated compliance with the orders imposed at the end of last year. It is high time for Meta to bring its processing into compliance and to stop unlawful processing.” (source: edpb.europa.eu/photo:freepik.com)

Comments

Post a Comment

Popular posts from this blog

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Image
The European Ombudsman inquiry into the Commission’s handling of a request for text messages between its President and the CEO of a pharmaceutical company is a wake-up call for all EU institutions about ensuring accountability in an era of instant messaging. One year after the initial request by a journalist, the Commission has still not clarified whether messages reported to concern major vaccine procurement deals exist and whether the public is entitled to see them. The Ombudsman had asked the Commission, in a finding of maladministration in January, to conduct a more thorough search for the text messages. The Commission’s recent response failed to say whether it had looked directly and correctly for the text messages and if not, why not. While the response recognised that work-related text messages can be EU documents, it reiterated that the Commission’s internal policy is, in effect, not to register text messages. The Ombudsman has closed  the inquiry  and upheld...
Read more

Prohibiting contact between children and their mother in custody and contact rights case was unjustified (ECtHR)

Image
The case of X and Others v. Slovenia (application nos. 27746/22 and 28291/22) concerned custody decisions and contact rights following the separation of X from her children’s father in 2018. It also concerned the reassignment of X’s court case to a particular judge.  In Chamber's judgment in the case, the European Court of Human Rights held, unanimously, that there had been a violation of Article 6 § 1 (right to a fair trial) of the European Convention on Human Rights, as regards X’s right to a tribunal established by law, and violations of Article 8 (right to respect for private and family life) with respect both to:  - the applicant children, as regards the order to remove them from X’s (their mother’s) care in March 2020, their not being represented in the contact and custody proceedings, and their not being allowed contact with their mother;  - X, for not being allowed contact with her children.  The Court found in particular that the President of the District Co...
Read more

Air passenger rights: A boarding pass may be sufficient to prove a confirmed reservation on a flight

Image
According to the Judgment of the European Court of Justice in Case C-20/24, a boarding pass may be sufficient to prove a confirmed reservation on a flight. Payment by a third party of the price of the package tour, including a flight, does not exclude the right to compensation in the event of long delay of a flight.  An air carrier offering charter flights concluded a contract with a tour operator. Under that contract, the carrier operated, on specific dates, flights for which that tour operator, after paying for the flights, sold tickets to air passengers. Two air passengers participated in a package tour, including a flight from Tenerife to Warsaw, the arrival of which was delayed by more than 22 hours. The contract relating to the package tour was concluded between a third company, on behalf of those passengers, and that tour operator. The passengers concerned claimed compensation from the air carrier under EU law. [1]  The latter refused to pay that compensation. It argued...
Read more

The Swiss authorities failed in their positive obligation to protect the life of a woman from violence by her partner (ECtHR)

Image
In the case of N.D. v. Switzerland, the European Court of Human Rights held that there had been a violation of the right to life in a case involving violence against a woman by her partner. The applicant, who had been unaware of her partner’s criminal record, was kidnapped by him from her home after informing him that she wished to end their relationship. She was then falsely imprisoned over an 11-hour period and subjected to rape and ill-treatment. To this day, the applicant suffers from the psychological after-effects of the treatment inflicted on her. The Court found that the authorities had not done all that could reasonably have been expected of them to avert the real and immediate risk to the applicant’s life, of which they had been or ought to have been aware. It noted that there had been neither an adequate assessment of the risk to the applicant’s life nor operational measures which might have had a real chance of altering the course of events or mitigating the da...
Read more

GDPR and transgender identity: the rectification of data relating to gender identity cannot be made conditional upon proof of surgery (CJEU)

Image
In its Judgment in Case C-247/23 |[Deldits] [1] the European Court of Justice ruled that the rectification of data relating to gender identity cannot be made conditional upon proof of surgery. In 2014, VP, an Iranian national, obtained refugee status in Hungary by relying on their transgender identity and producing medical certificates drawn up by specialists in psychiatry and gynaecology.  According to those certificates, although that person was born female, their gender identity was male. Following the recognition of their refugee status on that basis, that person was nevertheless registered as female in the asylum register, which is kept by the Hungarian asylum authority and contains identification data, including gender, of the persons who have obtained that status in Hungary.  In 2022, on the basis of the abovementioned medical certificates, VP requested, inter alia, that the asylum authority rectify the entry in respect of their gender in that register, on the basis of ...
Read more