The Court of Justice of the EU held that Meta may only process personal data for core services and must obtain freely given consent for advertising and data sharing. The judgment rejects Meta's reliance on contractual necessity and legitimate interest for personalized ads.
Why it matters: The ruling tightens GDPR enforcement by requiring consent for online advertising, impacting Meta and similar platforms.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.