Austria rules against Meta |
Austria’s Supreme Court has said that Meta’s personalized advertising model breaches the EU's General Data Protection Regulation (GDPR), in a ruling which forces the company to overhaul how it handles user data across the bloc. Under the ruling, Meta must give users full access to all personal data it holds within 14 days of a request. The court found that Meta collected user data from third-party apps and websites and processed sensitive information without "specific, informed, unambiguous and freely given" consent for personalized advertising. "[The ruling] is enforceable throughout the EU by the plaintiff, meaning that, depending on the country of enforcement, non-compliance could result in daily fines or even a prison sentence for the relevant decision-makers at Meta," privacy advocacy group noyb told Reuters.