Meta Faces Landmark EU Ruling: Full Data Access & End to Unlawful Personalized Ads
Vienna, Austria – In a watershed moment for data privacy, the Austrian Supreme Court has ruled decisively against Meta (formerly Facebook), finding the tech giant in violation of European Union data protection law. The ruling, stemming from an eleven-year legal battle initiated by privacy activist Max Schrems, mandates Meta provide complete access to personal data held on EU users and promptly cease unlawful personalized advertising practices. This decision underscores the EU’s commitment to stringent data protection and sets a powerful precedent for individual rights in the digital age.
A Decade-Long Fight for Data Transparency
The case, brought forward by Schrems, centers on Meta’s practices of utilizing user data for targeted advertising and aggregating that data without obtaining valid, explicit consent.The court specifically found Meta unlawfully collected personal information through cookies, social plugins, and integrations with third-party services – all without proper user authorization.
For years, meta responded to data access requests with partial disclosures, frequently enough directing users to a “download tool” offering what the company deemed “relevant” information based on it’s general privacy policy. This practice, the court resolute, was insufficient.
“Platforms like Facebook or Instagram have huge influence, for example via pushing political views on users,” Schrems stated through the European Center for Digital Rights (NOYB), the Vienna-based nonprofit he founded. “It was always absurd for Meta to claim that it does not process such data and must not comply with the law. The decision makes clear that Meta must not use such user preferences without explicit consent by each user.”
The Court’s Mandate: Complete Disclosure & Ad Halt
The Austrian Supreme Court’s ruling is far-reaching. Meta is now legally obligated to:
* Provide Full Data Access: Within 14 days (deadline December 31st), Meta must furnish Schrems with a complete copy of all personal data it holds about him, including detailed information on its source, purpose, and recipients. This obligation extends to any EU user who requests such access.
* Cease Unlawful Personalized Advertising: The court explicitly prohibited Meta from serving personalized advertisements to Schrems, recognizing the company lacked a lawful basis for processing his data for that purpose.
* Financial Repercussions: Schrems was awarded 500 euros (approximately $587) in non-material damages, though the total legal costs incurred over the 11-year battle have exceeded 200,000 euros (around $234,000).
Meta’s Response & Evolving Compliance Efforts
Meta acknowledged the court’s decision, stating they are reviewing the ruling. A spokesperson emphasized the ruling pertains to practices in place when the lawsuit was initially filed in 2014. Meta claims to have as implemented numerous updates to its data access tools, allowing users to access, download, or delete their data.
Furthermore, Meta recently announced plans to offer EU users greater control over personalized advertising, aligning with the EU’s evolving regulatory landscape. Users will soon have the option to access platforms with personalized or less personalized ads, or subscribe to an ad-free experience. These changes are slated to roll out in January 2026, following a 200 million euro (approximately $266 million) fine levied in April for breaching the EU’s Digital Markets Act (DMA). The DMA requires companies to provide users with meaningful choices regarding data usage for advertising.
The Broader Implications: A Turning Tide for Data Privacy
This ruling isn’t just a win for Max Schrems; it’s a notable victory for data privacy advocates across the EU and beyond. It reinforces the principle that individuals have the right to understand exactly what data companies hold about them and how it’s being used.
The European Commission hailed Meta’s upcoming advertising options as “the first time that such a choice is offered on Meta’s social networks,” signaling a shift towards greater user control. However, the court’s decision goes further, demanding a complete overhaul of Meta’s data processing practices and a commitment to lawful consent.
What This Means for EU Users
* Increased Data Control: EU users now have a stronger legal basis to demand full access to their personal data held by Meta.
* Reduced Targeted Advertising: The ruling directly impacts Meta’s ability to deliver personalized ads without explicit consent.
* A Precedent for Future Cases: This decision is likely to inspire similar legal challenges against other tech companies operating within the EU.
Looking Ahead
The outcome of
Keep reading