\n<\/p>\n
Today, the Irish Data Protection Commission (DPC) has set out its findings on the legal basis that Facebook and Instagram use under GDPR for the purpose of serving behavioural advertisements.\u00a0<\/span><\/p>\n The debate around legal bases has been ongoing for some time and businesses have faced a lack of regulatory certainty in this area. We strongly believe our approach respects GDPR, and we\u2019re therefore disappointed by these decisions and intend to appeal both the substance of the rulings and the fines.\u00a0<\/span><\/p>\n There has also been inaccurate speculation and misreporting on what these decisions mean. We want to reassure users and businesses that they can continue to benefit from personalised advertising across the EU through Meta\u2019s platforms.<\/span><\/p>\n In the EU, an organisation needs a legal basis to process data. Data processing occurs in a variety of situations, such as when data is stored, transferred or aggregated.\u00a0<\/span><\/p>\n GDPR allows for a range of legal bases under which data can be processed. The rules of GDPR are clear: there is no hierarchy between these legal bases \u2013 none should be considered better or more legitimate than any other. Which basis is most appropriate to use depends on the specific situation. Like many companies, Meta uses a combination of legal bases to provide various services.\u00a0<\/span><\/p>\n Facebook and Instagram are inherently personalised, and we believe that providing each user with their own unique experience \u2013 including the ads they see \u2013 is a necessary and essential part of that service. To date, we have relied on a legal basis called \u2018Contractual Necessity\u2019 to show people behavioural advertisements based on their activities on our platforms, subject to their safety and privacy settings. It would be highly unusual for a social media service not to be tailored to the individual user.<\/span><\/p>\n Since GDPR came into force, Meta has relied on Contractual Necessity to process the data needed to provide behavioural advertisements in the EU. We have always been open with regulators and courts about this, and in previous assessments of our services they did not object to the use of Contractual Necessity for this type of activity.<\/span><\/p>\n However, following recent engagement with and directions from other regulators across Europe, the DPC has now found that Meta must change its approach regarding the legal basis on which it processes user data for behavioural ads.<\/span><\/p>\n It\u2019s important to note that these decisions do not prevent personalised advertising on our platform. The decisions relate only to which legal basis Meta uses when offering certain advertising. <\/span>Advertisers can continue to use our platforms to reach potential customers, grow their business and create new markets.\u00a0<\/span><\/p>\n The decisions also do not mandate the use of Consent \u2013 another available legal basis under GDPR \u2013 for this processing. Similar businesses use a selection of legal bases to process data and we are assessing a variety of options that will allow us to continue offering a fully personalised service to our users. The suggestion that personalised ads can no longer be offered by Meta across Europe unless each user\u2019s agreement has first been sought is incorrect.<\/span><\/p>\n There has been a lack of regulatory clarity on this issue, and the debate among regulators and policymakers around which legal bases are most appropriate in a given situation has been ongoing for some time. <\/span>This issue is also currently being debated by the highest courts in the EU, who may yet reach a different conclusion altogether. That\u2019s why we <\/span>strongly disagree with the DPC\u2019s final decision, and believe we fully comply with GDPR by relying on Contractual Necessity for behavioural ads given the nature of our services. As a result, we will appeal the substance of the decision. Given that regulators themselves disagreed with each other on this issue up until the final stage of these processes in December, it is hard to understand how we can be criticised for the approach we have taken to date, and therefore we also plan to challenge the size of the fines imposed.<\/span><\/p>\n We\u2019re continually investing in new technology and processes to allow our community to manage their advertising and privacy preferences. <\/span>This includes steps to provide more detailed information to people about how their data is used and shared,<\/span> as well as tools to give people greater control over the information they share. For example:<\/span><\/p>\n You can learn more about how to manage and control your privacy experience on our <\/span>Privacy Center<\/span><\/a>.<\/span><\/p>\n<\/p><\/div>\nWhat is a Legal Basis?\u00a0<\/b><\/h2>\n
Businesses lack regulatory certainty around appropriate Legal Bases<\/b><\/h2>\n
We offer tools to manage your advertising and privacy preferences<\/b><\/h2>\n
\n