The Court of Justice of the European Union (CJEU) held that Meta must limit the processing of personal data for online advertising to what is strictly necessary, applying the GDPR data‑minimisation principle regardless of consent. It also rejected the notion that publicly made statements can retroactively justify processing of other personal data for advertising.
Why it matters: The ruling tightens GDPR enforcement on data‑minimisation, impacting Meta and all online ad platforms.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
