The Austrian Supreme Court ruled that Meta must provide a complete copy of all personal data to any user request within 14 days, including source, recipient and purpose information. The court also required Meta to obtain explicit opt‑in consent for personalized advertising and to keep sensitive data separate unless a legal basis under Article 9 GDPR applies. Meta was ordered to pay €500 in damages to the plaintiff.
Why it matters: The ruling strengthens GDPR enforcement by mandating full data access and stricter consent requirements for Meta across the EU.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
