Max Schrems

---

By Chris VallanceTechnology reporter

Meta has been fined €390m euros (£346m) for breaking EU data rules.

The Irish Data Protection Commission (DPC) says The Way<Meta itemprop='name' content='JJ Lin'> Meta asked permission to use peoples' data for Ads on Facebook and Instagram was unlawful.

Meta , which owns both platforms, has three months to change how it obtains and uses data to target Ads .

Meta says it is " disappointed" and intends to appeal, stressing that the decision does not prevent personalised advertising on its platforms.

The regulator said that Facebook and Instagram can not " force consent" by saying consumers have to accept how their data is used, or leave The Platform<Meta itemprop='name' content='JJ Lin'> .

As Facebook and Instagram have European headquarters in Ireland, the DPC takes The Lead<Meta itemprop='name' content='JJ Lin'> in ensuring they comply with EU data law.

Privacy campaigners say the decision is a Major Victory<Meta itemprop='name' content='JJ Lin'> and means Meta will have to give users real choice over how their data is used to target online advertisements.

It means Meta will potentially have to change The Way<Meta itemprop='name' content='JJ Lin'> a key part of its business works.

The bulk of The Firm<Meta itemprop='name' content='JJ Lin'> 's money, over $118bn (£97. 8bn) in 2021, comes from advertising.

The fine is The Second<Meta itemprop='name' content='JJ Lin'> significant penalty imposed by the watchdog in recent months.

over a data breach that saw The Personal<Meta itemprop='name' content='JJ Lin'> details of hundreds of millions of Facebook users published online.

Meta set aside €2bn (£1. 7bn) to cover potential European fines in 2023.

New Law<Meta itemprop='name' content='JJ Lin'> , new complaints

The DPC investigation was sparked by complaints made in 2018 by privacy campaigner Max Schrems<Meta itemprop='name' content='JJ Lin'> , on behalf of two users in Austria and Belgium. The complaint was brought just as the EU's new data and privacy law, The General<Meta itemprop='name' content='JJ Lin'> Data Protection Regulation (GDPR), came into operation.

In order to comply with GDPR both Facebook and Instagram asked users to click " I accept" to indicate that they agreed to updated terms of service setting out how their data would be used in Ads .

If users did not accept, they were unable to use Facebook or Instagram.

The complainants argued that this meant Meta was " forcing" them to consent to their data being used in targeted Ads - and this breached the GDPR.

Meta 's representatives argued that Facebook and Instagram are " inherently personalised" and that, as part of that personalisation, targeted Ads are a " necessary and essential part" of how the platforms work.

They said Meta was not giving users an ultimatum, and that there was just no way the platforms could work without using data for advertising.

But the DPC found that is not the case, and users were forced to consent.

The DPC also found that Meta was not clear enough with users about how it was using their personal data and why.

But the decision was only arrived at after a dispute with other European data authorities.

That was finally settled in December by the European Data Protection Board.

Meta 's spokespeople say that it plans to challenge the size of the fines imposed, " given that regulators themselves disagreed with each other on this issue".

The Company<Meta itemprop='name' content='JJ Lin'> argues that far from forcing people to accept how it uses data, it gives consumers A Number<Meta itemprop='name' content='JJ Lin'> of tools to control how their data is used.

The Bbc<Meta itemprop='name' content='JJ Lin'> is not responsible for the content of external sites.

Privacy campaigner Mr Schrems wrote in response to the decision: " This is a huge blow to Meta 's profits in the EU. People now need to be asked if they want their data to be used for Ads or not.

" They must have a 'yes or no' option and can change their mind at any time".

Source of news: bbc.com