Meta accused of enrolling undecided EU users in ad-sponsored platform
(2024/01/23)
- Reference: 1705994831
- News link: https://www.theregister.co.uk/2024/01/23/meta_eu_advertising/
- Source link:
Meta has been accused of automatically enrolling Europe-based users of its Facebook social network into the ad supported version of the service if they've not yet chosen between the free and paid subscription options, an action which would violates EU rules.
To comply with European law, Meta last October [1]announced it would offer a choice to Facebook and Instagram users in the EU, European Economic Area (EEA) and Switzerland. People could "choose to continue to use Facebook and Instagram with ads, or they could choose to pay a monthly fee for a subscription service with no ads on Facebook and Instagram."
That plan was challenged the following month by privacy advocacy group noyb (None Of Your Business) in [2]a lawsuit that argues EU law requires consent for data processing to be given freely, rather than be offered as an alternative to a fee. Earlier this month, Noyb also filed [3]a lawsuit [PDF] objecting to the inability to freely withdraw data processing consent granted to Facebook or Instagram.
[4]
Meta's "Pay or Consent" model now faces another obstacle in the form of a complaint filed with the Irish Data Protection Commission (DPC). Privacy consultant Alexander Hanff, an occasional [5]contributor to The Register , told us that Meta appears to have stopped asking people in Europe to choose between the free version of Facebook that comes with ads and the paid version with no advertising.
[6]
[7]
Alleging this represents a direct breach of the Judgement in Case C-673/17, which says that pre-checked opt-in is not permitted under EU law, Hanff asked the DPC to intervene.
"It seems that Meta have decided that as of this weekend they will no longer ask people to choose via a popup when you go to Facebook.com but instead to enroll everyone who has not paid directly into the 'Use for free with ads,'" he told The Register .
[8]
Citing the case mentioned above, the complaint argues that it is illegal for Meta Ireland to automatically enroll Facebook users in the free version of the service, with all the ad-related data collection that entails.
"Given that they have done this to potentially tens of million of people in the EU over the weekend, this is an urgent situation that should be addressed through the urgency mechanism under Article 66 of the GDPR," the complaint argues.
The Irish DPC did not immediately respond to a request for comment.
[9]Zuckerberg wants to build artificial general intelligence with 350K Nvidia H100 GPUs
[10]Study: Thousands of businesses just love handing over your info to Facebook
[11]YouTube video lag wrongly blamed on its ad-blocking animus
[12]Facebook, Instagram now mine web links you visit to fuel targeted ads
Meta declined to address this in an on-the-record statement – perhaps being wary about saying something that would make its legal situation more precarious – but a spokesperson explained that Meta is not processing user data for EU-based accounts that have not yet chosen between the pay or consent service options.
We're told that everyone who has used Instagram and Facebook in the EU, the EEA, and Switzerland since November has been presented with the option to pay and avoid ads. That choice, evidently no longer pushed via popup menu, remains available through the account centers for the respective services.
[13]
Some users, however, have not yet made a choice and now appear to be in a sort of limbo as a result. They've been enrolled in – or "continue," as Meta puts it – the free, ad-supported version of the service but their information isn't presently being used for ad targeting and they're not being presented with ads. It's unclear how long this state of affairs will persist.
Meta on Monday [14]said it plans to ask EU users of Facebook and Instagram to make another choice: whether or not to share information across the two services. ®
Get our [15]Tech Resources
[1] https://about.fb.com/news/2023/10/facebook-and-instagram-to-offer-subscription-for-no-ads-in-europe/
[2] https://www.theregister.com/2023/11/28/metas_eu_privacy_fee_triggers/
[3] https://noyb.eu/sites/default/files/2024-01/Meta_Withdrawal_Complaint_REDACTED_EN.pdf
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://www.theregister.com/Author/Alexander-Hanff
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2024/01/20/metas_ai_plans/
[10] https://www.theregister.com/2024/01/18/facebook_tracking_data/
[11] https://www.theregister.com/2024/01/17/youtube_video_lag_ads/
[12] https://www.theregister.com/2024/01/08/security_in_brief/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://about.fb.com/news/2024/01/offering-people-more-choice-on-how-they-can-use-our-services-in-the-eu/
[15] https://whitepapers.theregister.com/
To comply with European law, Meta last October [1]announced it would offer a choice to Facebook and Instagram users in the EU, European Economic Area (EEA) and Switzerland. People could "choose to continue to use Facebook and Instagram with ads, or they could choose to pay a monthly fee for a subscription service with no ads on Facebook and Instagram."
That plan was challenged the following month by privacy advocacy group noyb (None Of Your Business) in [2]a lawsuit that argues EU law requires consent for data processing to be given freely, rather than be offered as an alternative to a fee. Earlier this month, Noyb also filed [3]a lawsuit [PDF] objecting to the inability to freely withdraw data processing consent granted to Facebook or Instagram.
[4]
Meta's "Pay or Consent" model now faces another obstacle in the form of a complaint filed with the Irish Data Protection Commission (DPC). Privacy consultant Alexander Hanff, an occasional [5]contributor to The Register , told us that Meta appears to have stopped asking people in Europe to choose between the free version of Facebook that comes with ads and the paid version with no advertising.
[6]
[7]
Alleging this represents a direct breach of the Judgement in Case C-673/17, which says that pre-checked opt-in is not permitted under EU law, Hanff asked the DPC to intervene.
"It seems that Meta have decided that as of this weekend they will no longer ask people to choose via a popup when you go to Facebook.com but instead to enroll everyone who has not paid directly into the 'Use for free with ads,'" he told The Register .
[8]
Citing the case mentioned above, the complaint argues that it is illegal for Meta Ireland to automatically enroll Facebook users in the free version of the service, with all the ad-related data collection that entails.
"Given that they have done this to potentially tens of million of people in the EU over the weekend, this is an urgent situation that should be addressed through the urgency mechanism under Article 66 of the GDPR," the complaint argues.
The Irish DPC did not immediately respond to a request for comment.
[9]Zuckerberg wants to build artificial general intelligence with 350K Nvidia H100 GPUs
[10]Study: Thousands of businesses just love handing over your info to Facebook
[11]YouTube video lag wrongly blamed on its ad-blocking animus
[12]Facebook, Instagram now mine web links you visit to fuel targeted ads
Meta declined to address this in an on-the-record statement – perhaps being wary about saying something that would make its legal situation more precarious – but a spokesperson explained that Meta is not processing user data for EU-based accounts that have not yet chosen between the pay or consent service options.
We're told that everyone who has used Instagram and Facebook in the EU, the EEA, and Switzerland since November has been presented with the option to pay and avoid ads. That choice, evidently no longer pushed via popup menu, remains available through the account centers for the respective services.
[13]
Some users, however, have not yet made a choice and now appear to be in a sort of limbo as a result. They've been enrolled in – or "continue," as Meta puts it – the free, ad-supported version of the service but their information isn't presently being used for ad targeting and they're not being presented with ads. It's unclear how long this state of affairs will persist.
Meta on Monday [14]said it plans to ask EU users of Facebook and Instagram to make another choice: whether or not to share information across the two services. ®
Get our [15]Tech Resources
[1] https://about.fb.com/news/2023/10/facebook-and-instagram-to-offer-subscription-for-no-ads-in-europe/
[2] https://www.theregister.com/2023/11/28/metas_eu_privacy_fee_triggers/
[3] https://noyb.eu/sites/default/files/2024-01/Meta_Withdrawal_Complaint_REDACTED_EN.pdf
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://www.theregister.com/Author/Alexander-Hanff
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2024/01/20/metas_ai_plans/
[10] https://www.theregister.com/2024/01/18/facebook_tracking_data/
[11] https://www.theregister.com/2024/01/17/youtube_video_lag_ads/
[12] https://www.theregister.com/2024/01/08/security_in_brief/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Za@cVjoFZTNmWSs9I6IXvgAAAAo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://about.fb.com/news/2024/01/offering-people-more-choice-on-how-they-can-use-our-services-in-the-eu/
[15] https://whitepapers.theregister.com/
Tubz
Time for the regulators to stop pussy footing around with Mega Corps and start hitting them with massive fines for deliberately ignoring GDPR and local laws, maybe a nice 10% of yearly global profits. They only listen when hitting profits, even bad PR does nothing these days.
Headley_Grange
Additionally, as well as swingeing fines, they should make them pay back all turnover they made from the illegal acts from the date that the lawsuit was opened. If the ad-slinger says this is too hard to calculate then just start at 100% unless they can prove different. This will stop them dragging court cases out.
Like it will make any difference...
Dippywood
"Meta on Monday said it plans to ask EU users of Facebook and Instagram to make another choice: whether or not to share information across the two services."
What a wonderful track record Meta has for keeping its word on such things. Say 'yes', say 'no', they'll gobble your data anyway, just like they promised not to for WhatsApp.
If they know that the penalty for non-compliance is too small to notice compared to the cost of compliance then why the fuck would they comply? The lawyers are on the payroll, so already costed in. Until they are fined amounts large enough to make a dent in their turnover and share price then they'll just keep going until the rest of the world hasn't got enough money to go to court.