Meta Platforms Ireland Limited (Facebook)

What happened

Following a referral under the Article 60 GDPR procedure, the EDPB issued a binding decision finding Meta IE’s processing of personal data for behavioural advertising to be unlawful.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4DefinitionsRead →
• Art. 5Principles relating to processing of personal dataRead →
• Art. 6Lawfulness of processingRead →
• Art. 7Conditions for consentRead →
• Art. 9Processing of special categories of personal dataRead →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 21Right to objectRead →
• Art. 24Responsibility of the controllerRead →
• Art. 56Competence of the lead supervisory authorityRead →
• Art. 58PowersRead →
• Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concernedRead →
• Art. 65Dispute resolution by the BoardRead →
• Art. 77Right to lodge a complaint with a supervisory authorityRead →
• Art. 79Right to an effective judicial remedy against a controller or processorRead →
• Art. 83General conditions for imposing administrative finesRead →

• Accountability
• Consent
• Data principles
• Data subject rights
• Special categories
• Transparency
• Unlawful processing