Urgent Binding Decision on processing of personal data for behavioural advertising by Meta

On 27 October, the European Data Protection Board (EDPB) adopted an urgent binding decision instructing the Irish (IE) DPA as lead supervisory authority (LSA) to take, within two weeks, final measures regarding Meta Ireland Limited (Meta IE) and to impose a ban on the processing of personal data for behavioural advertising on the legal bases of contract and legitimate interest across the entire European Economic Area (EEA).

The urgent binding decision followed a request from the Norwegian Data Protection Authority (NO DPA) to take final measures in this matter that would have effect in the entire European Economic Area (EEA).

The ban on processing will become effective one week after the notification of the final measures by the IE SA to the controller.
The Irish DPC has notified Meta on 31/10 about the EDPB Urgent Binding Decision.
The EDPB takes note of Meta's proposal to rely on a consent based approach as legal basis, as it was reported on 30/10. The Irish DPC is currently evaluating this together with the Concerned Supervisory Authorities (CSAs).

EDPB Chair Anu Talus said: “After careful consideration, the EDPB considered it necessary to instruct the IE SA to impose an EEA-wide processing ban, addressed to Meta IE. Already in December 2022, the EDPB Binding Decisions clarified that contract is not a suitable legal basis for the processing of personal data carried out by Meta for behavioural advertising. In addition, Meta has been found by the IE SA to not have demonstrated compliance with the orders imposed at the end of last year. It is high time for Meta to bring its processing into compliance and to stop unlawful processing.” (source: edpb.europa.eu/photo:freepik.com)

Comments

Post a Comment

Popular posts from this blog

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Image
The European Ombudsman inquiry into the Commission’s handling of a request for text messages between its President and the CEO of a pharmaceutical company is a wake-up call for all EU institutions about ensuring accountability in an era of instant messaging. One year after the initial request by a journalist, the Commission has still not clarified whether messages reported to concern major vaccine procurement deals exist and whether the public is entitled to see them. The Ombudsman had asked the Commission, in a finding of maladministration in January, to conduct a more thorough search for the text messages. The Commission’s recent response failed to say whether it had looked directly and correctly for the text messages and if not, why not. While the response recognised that work-related text messages can be EU documents, it reiterated that the Commission’s internal policy is, in effect, not to register text messages. The Ombudsman has closed  the inquiry  and upheld...
Read more

The “Green Maze”: Environmental Obligations for Cement Companies in Greece and Cyprus

Image
Written by Efi Thoma * The cement industry plays a crucial role in the infrastructure development of both Greece and Cyprus. However, this essential sector also carries a significant environmental footprint. From quarrying raw materials to the energy-intensive production process, cement companies face increasing scrutiny and stringent legal obligations aimed at mitigating their impact on the environment. This article delves into the key environmental issues and the pertinent legal frameworks in Greece and Cyprus that cement manufacturers must navigate. Both Greece and Cyprus, as members of the European Union, are bound by a substantial body of EU environmental law. This includes cornerstone directives such as the Environmental Impact Assessment (EIA) Directive, the Industrial Emissions Directive (IED), the Waste Framework Directive, and legislation addressing climate change and biodiversity. These EU regulations are transposed into national law in both countries, forming the bedrock ...
Read more

The first international convention on protecting lawyers adopted by the Council of Europe

Image
The Council of Europe has adopted the first-ever international treaty aiming to protect the profession of lawyer. This is to respond to increasing reports of attacks on the practice of the profession, whether in the form of harassment, threats or attacks, or interference with the exercise of professional duties (for example, obstacles to access to clients). Lawyers play a key role in upholding the rule of law and securing access to justice for all, including to vindicate possible human rights violations. Therefore, public confidence in justice systems also depends on the role played by lawyers. The  Council of Europe Convention for the Protection of the Profession of Lawyer  covers lawyers and their professional associations, whose role is vital in defending lawyers’ rights and interests as a profession. The Convention addresses entitlement to practise, professional rights, freedom of expression, professional discipline and specific protective measures for lawyer...
Read more

Automated credit assessment: The data subject is entitled to an explanation as to how the decision was taken in respect of him or her

Image
In its Judgment (27.2.2025) in Case C-203/22 (Dun & Bradstreet Austria) as regards the automated credit assessment, the Court of Justice ruled that the data subject is entitled to an explanation as to how the decision was taken in respect of him or her. The explanation provided must enable the data subject to understand and challenge the automated decision. In Austria, a mobile telephone operator refused to allow a customer to conclude a contract on the ground that her credit standing was insufficient. The operator relied in that regard on an assessment of the customer’s credit standing carried out by automated means by Dun & Bradstreet Austria, an undertaking specialising in the provision of such assessments. The contract would have involved a monthly payment of €10. In the ensuing dispute, an Austrian court found, by final decision, that Dun & Bradstreet had infringed the General Data Protection Regulation (GDPR). [1]. Dun & Bradstreet had failed to provide the custom...
Read more

Prohibiting contact between children and their mother in custody and contact rights case was unjustified (ECtHR)

Image
The case of X and Others v. Slovenia (application nos. 27746/22 and 28291/22) concerned custody decisions and contact rights following the separation of X from her children’s father in 2018. It also concerned the reassignment of X’s court case to a particular judge.  In Chamber's judgment in the case, the European Court of Human Rights held, unanimously, that there had been a violation of Article 6 § 1 (right to a fair trial) of the European Convention on Human Rights, as regards X’s right to a tribunal established by law, and violations of Article 8 (right to respect for private and family life) with respect both to:  - the applicant children, as regards the order to remove them from X’s (their mother’s) care in March 2020, their not being represented in the contact and custody proceedings, and their not being allowed contact with their mother;  - X, for not being allowed contact with her children.  The Court found in particular that the President of the District Co...
Read more