Regulatory Watch  /  Germany  /  Court ruling
Moderate impactCourt rulingDecided

CJEU rules Meta must rely on consent for advertising, limiting GDPR bypass attempts

The Court of Justice of the EU held that Meta may only process personal data for core services and must obtain freely given consent for advertising and data sharing. The judgment rejects Meta's reliance on contractual necessity and legitimate interest for personalized ads.

Why it matters: The ruling tightens GDPR enforcement by requiring consent for online advertising, impacting Meta and similar platforms.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
CJEU declares Meta/Facebook's GDPR approach largely illegal
noyb · primary source · Jul 4, 2023
CJEU declares Meta/Facebook's GDPR approach largely illegal
noyb · Jul 4, 2023
Details
JurisdictionGermany
RegulatorEDPB
CourtCourt of Justice of the European Union (CJEU)
LawGeneral Data Protection Regulation
StatusDecided
PublishedJuly 4, 2023
Effectivenot stated
OrganisationsMeta, Facebook, Bundeskartellamt
Topicsconsent, targeted advertising, profiling, data minimization
Datapersonal