{"id":395066,"date":"2024-10-04T13:03:00","date_gmt":"2024-10-04T11:03:00","guid":{"rendered":"https:\/\/www.eunews.it\/2024\/10\/04\/gdpr-cgue-dati-personali-max-schrems\/"},"modified":"2024-10-10T15:53:01","modified_gmt":"2024-10-10T13:53:01","slug":"personal-data-eu-court-of-justice-verdict-meta-cannot-store-them-without-time-limits-and-users-explicit-consent","status":"publish","type":"post","link":"https:\/\/www.eunews.it\/en\/2024\/10\/04\/personal-data-eu-court-of-justice-verdict-meta-cannot-store-them-without-time-limits-and-users-explicit-consent\/","title":{"rendered":"Personal data, EU Court of Justice verdict: Meta cannot store them without time limits and users’ explicit consent"},"content":{"rendered":"

Brussels – \u00a0Digital platforms <\/strong>cannot use personal data<\/strong> for advertising<\/strong> without\u00a0restriction as to time <\/strong>and without distinction as to the type of data<\/strong>. The\u00a0Court of Justice of the European Union (CJEU),\u00a0the EU’s highest court, today\u00a0(Oct. 4) established\u00a0<\/strong>this in\u00a0a case brought by Austrian activist Maximilian Schrems<\/strong> in 2020. The issue, in essence, was whether or not Meta<\/strong> (the parent company of Facebook<\/strong>, Instagram,<\/strong> and Whatsapp<\/strong>) breached\u00a0the EU regulation on data processing<\/strong>\u00a0(General Data Protection Regulation<\/i>, GDPR<\/strong>), which the US giant collects extensively to sell to advertisers.<\/p>\n

In the end, the CJEU judges agreed with Schrems<\/strong>, a well-known privacy activist, following the (non-binding) opinion expressed in\u00a0April by the Court’s Advocate General, Athanasios Rantos<\/strong>, who had sided with the plaintiff. In the case at hand, the CJEU\u00a0ruled<\/a> that platforms are not allowed to use data about users obtained externally or from third parties<\/strong>, not even in cases where they have been made public by the users. Specifically, the fact that Schrems had spoken about his sexual orientation at a public event<\/strong> (offline) does not allow Meta to process this data “with a view to aggregating and analyzing those data, in order to offer him personalized advertising”<\/strong> unless he had explicitly consented to its processing by the social network – consent that was instead convincingly denied.<\/p>\n

In short, platforms can only use data that users disclose directly, and the processing of which is expressly authorized. In addition to this, the Court also reiterated that a social network\u00a0“cannot use personal data obtained for the purposes of targeted advertising, without restriction as to time and without distinction as to type of data<\/strong>.” That is to say, data collected by platforms in compliance with the GDPR have an expiration date, especially particularly sensitive ones – such as those concerning sexual orientation, religious profession, political beliefs, and so on.<\/p>\n

Katharina Raabe-Stuppnig<\/strong>, Schrems’ lawyer, said she was “very pleased with the ruling,” even though widely expected. “Meta has been building an\u00a0enormous pool of user data<\/strong> for 20 years, which is growing by the day,” she said, noting that this stands in open conflict with European law<\/strong> that requires so-called “data minimization<\/strong>,” meaning the collection, processing, and storage only of data that is truly indispensable for a well-defined purpose<\/strong>.\u00a0 The CJEU’s decision, which will apply to all online advertising companies, effectively strengthens the regulatory framework introduced by the GDPR.<\/p>\n

After all, it is not the first time the Austrian activist has won judicial victories against Meta. In two separate trials in 2013 and 2018, Schrems successfully challenged user data transfer agreements between the EU and the United States.<\/p>\n","protected":false},"excerpt":{"rendered":"

According to CJEU judges, Meta’s processing and storage of user data does not comply with the “minimization” principle imposed by the GDPR<\/p>\n","protected":false},"author":7876,"featured_media":395033,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"episode_type":"","audio_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","jnews-multi-image_gallery":[],"jnews_single_post":{"source_name":"","source_url":"","via_name":"","via_url":"","override_template":"0","override":[{"template":"1","single_blog_custom":"","parallax":"1","fullscreen":"1","layout":"right-sidebar","sidebar":"default-sidebar","second_sidebar":"default-sidebar","sticky_sidebar":"1","share_position":"top","share_float_style":"share-monocrhome","show_share_counter":"0","show_view_counter":"0","show_featured":"1","show_post_meta":"1","show_post_author":"1","show_post_author_image":"1","show_post_date":"1","post_date_format":"default","post_date_format_custom":"Y\/m\/d","show_post_category":"1","show_post_reading_time":"0","post_reading_time_wpm":"300","post_calculate_word_method":"str_word_count","show_zoom_button":"0","zoom_button_out_step":"2","zoom_button_in_step":"3","show_post_tag":"1","show_prev_next_post":"1","show_popup_post":"1","number_popup_post":"1","show_author_box":"0","show_post_related":"1","show_inline_post_related":"0"}],"override_image_size":"0","image_override":[{"single_post_thumbnail_size":"crop-500","single_post_gallery_size":"crop-500"}],"trending_post":"0","trending_post_position":"meta","trending_post_label":"Trending","sponsored_post":"0","sponsored_post_label":"Sponsored by","sponsored_post_name":"","sponsored_post_url":"","sponsored_post_logo_enable":"0","sponsored_post_logo":"","sponsored_post_desc":"","disable_ad":"0"},"jnews_primary_category":{"id":"","hide":""},"jnews_override_counter":{"override_view_counter":"0","view_counter_number":"0","override_share_counter":"0","share_counter_number":"0","override_like_counter":"0","like_counter_number":"0","override_dislike_counter":"0","dislike_counter_number":"0"},"footnotes":""},"categories":[25710],"tags":[28917,28662,27281,29251,27368,29252],"class_list":["post-395066","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-net-tech-en","tag-court-justice-eu-en","tag-court-of-justice-ue-en","tag-gdpr-en","tag-maximilian-schrems-en","tag-meta-en","tag-protections-personal-data-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/posts\/395066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/users\/7876"}],"replies":[{"embeddable":true,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/comments?post=395066"}],"version-history":[{"count":4,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/posts\/395066\/revisions"}],"predecessor-version":[{"id":395126,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/posts\/395066\/revisions\/395126"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/media\/395033"}],"wp:attachment":[{"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/media?parent=395066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/categories?post=395066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.eunews.it\/en\/wp-json\/wp\/v2\/tags?post=395066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}