The European Data Protection Board, following the Irish Data Protection Commission, ruled that Meta's use of personal data for personalized advertising violated the GDPR and imposed a €390 million fine. Meta must obtain opt‑in consent and provide a yes/no option for personalized ads, and cannot use personal data for ads without consent. The decision applies to Facebook and Instagram, with a pending case for WhatsApp.
Why it matters: The ruling forces Meta to change its ad model in the EU and imposes a record GDPR fine.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.