Facebook have now thrown up a modal dialogue one must accept to continue. It says:<p>===<p>Make a choice about your ads
As part of changing laws in your region, you can now choose to continue using Meta Products for free by allowing us to use your info for ads. Or you can subscribe to use them without ads.<p>===<p>Isn't this now illegal according to new EU law (thanks to the Norwegian precedent), which outlaws using personal info for targeted ads?<p>The law "impose[s] a ban on the processing of personal data for behavioural advertising on the legal bases of contract and legitimate interest across the entire European Economic Area."<p>Are they trying to coerce users into a 'decision' through the perception of choice? This document [1] notes:<p>"The dangers of consent being misused are particularly serious when consent is commodified, i.e., when it is given to obtain benefits that are extrinsic to the processing for which consent is requested, as is typically the case in targeted advertising."<p>The Register [2] noted:
"Meta now will have to ask for a simple "yes" or "no" consent before using their personal data..."<p>The above modal is not a simple yes or no, or a yes or no at all. It seems to be an either my way or the highway.<p>[1] https://www.europarl.europa.eu/RegData/etudes/BRIE/2021/696967/IPOL_BRI(2021)696967_EN.pdf
[2] https://www.theregister.com/2023/08/02/meta_eu_gdpr_advertising/
I don’t like Meta but what is the alternative? Forcing them to provide the service for free?<p>To me : either you consent to let us make money using your data, or you agree to pay the service with your money or you stop using the service.<p>Seems pretty fair
I don't believe profiling (targeted ads) is illegal. GDPR does not block profiling. It's just that in cases such this, a Data Protection Threshold Assessment would produce a "Yes" and thus force the data processor to create a Data Protection Impact Assessment (to ensure that data subjects' data is/are protected (as per Article 32 - <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e3383-1-1" rel="nofollow noreferrer">https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...</a>)<p>"Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate"<p>Also Article 35 - Data protection impact assessment. (not pasting it here, it's tooooo long)<p>Profiling would be 'criminal' (not really) for decision making that can affect someone's life (i.e. approval for a mortgage, accepting/rejecting request to obtain nationality, etc.) The profiling/decision whether to see an ad about cars vs motorbikes it not hurting you. If we are talking about the cases like Target-2012-pregnant (<a href="https://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/" rel="nofollow noreferrer">https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...</a>) well no GDPR there.<p>Also, considering the impact of the brand new EU-US DPF, Meta is Active on it (<a href="https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active" rel="nofollow noreferrer">https://www.dataprivacyframework.gov/s/participant-search/pa...</a>) it should make Meta's (and many others' US-based companies life VERY easy to siphon data)(but they still have to act responsibly and under the EU-US DPF).