Privacy

EU privacy body adopts view on Meta’s controversial ‘consent or pay’ tactic

Comment

Mark Zuckerberg, CEO of Meta testifies before the Senate Judiciary Committee at the Dirksen Senate Office Building on January 31, 2024 in Washington, DC.
Image Credits: Alex Wong/Getty Images

Incoming guidance by an expert steering body on European Union data protection law could have major implications for Meta’s advertising business model. The European Data Protection Board (EDPB) has decided that large platforms such as Facebook and Instagram cannot force a “binary” pay or consent choice on users, Politico reported on Wednesday, citing two people with direct knowledge of the decision.

Yet, a binary choice (AKA “consent or pay”) is exactly what Meta wants to enforce on users in the region. The decision looks set to leave Meta with no option but to reform its business model to comply with EU law, which would mean giving users in the bloc the ability to deny its tracking.

The EDPB has been meeting this week to discuss adopting an opinion on the so-called “consent or pay” model following a request made back in February by a trio of concerned data protection authorities. A spokeswoman for the EDPB confirmed to TechCrunch that it adopted an opinion on “consent or pay” on Wednesday morning, saying it will be published later today. However, she would not confirm the substance of the decision, saying, “We are not in a position to comment on the content of the opinion before the opinion is published.”

After EU regulators and courts overturned two prior legal bases Meta had claimed for processing people’s data for ads, the company went on to launch a controversial subscription offer in the EU last fall. The company claimed its offer constituted valid consent under the bloc’s General Data Protection Regulation (GDPR), which regulates how personal data can be handled (including the need to have a valid legal basis for such processing).

However, the choice Meta gives EU users is a binary one: Either consent to its use of personal data for targeted advertising, or pay a monthly fee to access ad-free versions of its social networks. Meta initially set the monthly fee at €13 per mobile account, and later proposed to halve the cost. But privacy campaigners and consumer rights groups have continued to cry foul and file a raft of complaints, arguing the flaws of “consent or pay” run far deeper than Meta’s chosen price-point.

Lawmakers and the European Commission have also waded into the fray. The latter is investigating whether Meta’s use of the mechanism complies with the bloc’s Digital Markets Act, which requires in-scope platforms to obtain consent to process user data for ads. It has also questioned Meta about its claim of consent under the Digital Services Act.

But the EDPB’s opinion is critical for the core issue of whether Meta’s mechanism complies with the EU’s long-standing data protection framework. So the full detail of the opinion will be pored over when it’s made public.

In its report, Politico cites part of the EDPB decision: “In most cases, it will not be possible for large online platforms to comply with the requirements for valid consent if they confront users only with a binary choice between consenting to processing of personal data for behavioural advertising purposes and paying a fee.”

Privacy rights nonprofit noyb, which has been fighting the rise of “consent or pay” tactics on regional websites for years, seized on the development to trumpet a win against Meta. The organization also cautioned that it will need to analyze the full EDPB opinion in detail once it’s available.

“Overall, Meta is out of options in the EU. It must now give users a genuine yes/no option for personalised advertising,” said noyb’s founder and chairman, Max Schrems, in a statement following Politico’s report.

“[Meta] can still charge sites for reach, engage in contextual advertising and the like — but tracking people for ads needs a clear ‘yes’ from users,” Schrems added. He suggested a third option (i.e. not tracking, or not paying) could also, for example, entail Meta collecting revenue from sponsored posts or other types of paid content, just so long as there’s no tracking or targeting of users involved.

Meta did not immediately respond to a request for comment on the development.

More TechCrunch

U.S. President Joe Biden has announced he no longer plans to seek reelection, a decision that follows weeks of growing pressure from some Democratic Party supporters, including high-profile tech investors…

Joe Biden drops out of presidential race

Google is expected to announce four Pixel devices: the Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL and Pixel 9 Pro Premium, running Android 15.

Made by Google 2024: Pixel 9, Gemini, a new foldable and other things to expect from the event

WazirX, one of India’s largest cryptocurrency exchanges, has “temporarily” suspended all trading activities on its platform days after losing about $230 million, nearly half of its reserves, in a security…

WazirX halts trading after $230 million ‘force majeure’ loss

Featured Article

From Yandex’s ashes comes Nebius, a ‘startup’ with plans to be a European AI compute leader

Subject to shareholder approval, Yandex N.V. is adopting the name of one of its few remaining assets, an AI cloud platform called Nebius AI which it birthed last year.

From Yandex’s ashes comes Nebius, a ‘startup’ with plans to be a European AI compute leader

Employees at Bethesda Game Studios — the Microsoft-owned game developer that produces the Elder Scrolls and Fallout franchises — are joining the Communication Workers of America. Quality assurance testers at…

Bethesda Game Studios employees form a ‘wall-to-wall’ union

This week saw one of the most widespread IT disruptions in recent years linked to a faulty software update from popular cybersecurity firm CrowdStrike. Businesses across the world reported IT…

CrowdStrike’s update fail causes global outages and travel chaos

Alphabet, the parent company of Google, is in advanced talks to acquire cybersecurity startup Wiz for $23 billion, the Wall Street Journal reported on Sunday. TechCrunch’s sources heard similar and…

Unpacking how Alphabet’s rumored Wiz acquisition could affect VC

Around 8.5 million devices — less than 1 percent Windows machines globally — were affected by the recent CrowdStrike outage, according to a Microsoft blog post by David Weston, the…

Microsoft says 8.5M Windows devices were affected by CrowdStrike outage

Featured Article

Some Black startup founders feel betrayed by Ben Horowitz’s support for Trump

Trump is an advocate for a number of policies that could be harmful to people of color.

Some Black startup founders feel betrayed by Ben Horowitz’s support for Trump

Featured Article

Strava’s next chapter: New CEO talks AI, inclusivity, and why ‘dark mode’ took so long

TechCrunch sat down with Strava’s new CEO in London for a wide-ranging interview, delving into what the company is prioritizing, and what we can expect in the future as the company embarks on its “next chapter.”

Strava’s next chapter: New CEO talks AI, inclusivity, and why ‘dark mode’ took so long

Featured Article

Lavish parties and moral dilemmas: 4 days with Silicon Valley’s MAGA elite at the RNC

All week at the RNC, I saw an event defined by Silicon Valley. But I also saw the tech elite experience flashes of discordance.

Lavish parties and moral dilemmas: 4 days with Silicon Valley’s MAGA elite at the RNC

Featured Article

Tracking the EV battery factory construction boom across North America

A wave of automakers and battery makers — foreign and domestic — have pledged to produce North American–made batteries before 2030.

Tracking the EV battery factory construction boom across North America

Featured Article

Faulty CrowdStrike update causes major global IT outage, taking out banks, airlines and businesses globally

Security giant CrowdStrike said the outage was not caused by a cyberattack, as businesses anticipate widespread disruption.

Faulty CrowdStrike update causes major global IT outage, taking out banks, airlines and businesses globally

CISA confirmed the CrowdStrike outage was not caused by a cyberattack, but urged caution as malicious hackers exploit the situation.

US cyber agency CISA says malicious hackers are ‘taking advantage’ of CrowdStrike outage

The global outage is a perfect reminder how much of the world relies on technological infrastructure.

These startups are trying to prevent another CrowdStrike-like outage, according to VCs

The CrowdStrike outage that hit early Friday morning and knocked out computers running Microsoft Windows has grounded flights globally. Major U.S. airlines including United Airlines, American Airlines and Delta Air…

CrowdStrike outage: How your plane, train and automobile travel may be affected

Prior to the ban, Trump’s team used his channel to broadcast some of his campaigns. With the ban now lifted, his channel can resume doing so.

Twitch reinstates Trump’s account ahead of the 2024 presidential election

This week, Google is in discussions to pay $23 billion for cloud security startup Wiz, SoftBank acquires Graphcore, and more.

M&A activity heats up with Wiz, Graphcore, etc.

CrowdStrike competes with a number of vendors, including SentinelOne and Palo Alto Networks but also Microsoft, Trellix, Trend Micro and Sophos, in the endpoint security market.

CrowdStrike’s rivals stand to benefit from its update fail debacle

The IT outage may have an unexpected effect on the climate: clearer skies and maybe lower temperatures this evening

CrowdStrike chaos leads to grounded aircraft — and maybe an unusual weather effect

There’s a man in Florida right now who wants to propose to his girlfriend while they’re on a beach vacation. He couldn’t get the engagement ring before he flew down…

The CrowdStrike outage is a plot point in a rom-com 

Here’s everything you need to know so far about the global outages caused by CrowdStrike’s buggy software update.

What we know about CrowdStrike’s update fail that’s causing global outages and travel chaos

This serves as an example for how easy it is to spread inaccurate information online during a time of immense global confusion and panic.

From the Sphere to false cyberattack claims, misinformation runs rampant amid CrowdStrike outage

Today is the final chance to save up to $800 on TechCrunch Disrupt 2024 tickets. Disrupt Deal Days event will end tonight at 11:59 p.m. PT. Don’t miss out on…

Last chance today: Secure major savings for TechCrunch Disrupt 2024!

Indian fintech Paytm’s struggles won’t seem to end. The company on Friday reported that its revenue declined by 36% and its loss more than doubled in the first quarter as…

Paytm loss widens and revenue shrinks as it grapples with regulatory clampdown

J. Michael Cline, the co-founder of Fandango and multiple other startups over his multi-decade career, died after falling from a Manhattan hotel, New York’s Deputy Commissioner of Public Information tells…

Fandango founder dies in fall from Manhattan skyscraper

Venture capital giant a16z fixed a security vulnerability in one of the firm’s websites after being warned by a security researcher.

Researcher finds flaw in a16z website that exposed some company data

Apple on Thursday announced its upcoming lineup of immersive video content for the Vision Pro. The list includes behind-the-scenes footage of the 2024 NBA All-Star Weekend, an immersive performance by…

Apple Vision Pro debuts immersive content featuring NBA players, The Weeknd and more

Biden centering Musk in his campaign is a notable escalation, considering he spent most of his presidency seemingly pretending the billionaire didn’t exist.

Elon Musk is now a villain in Joe Biden’s presidential campaign

Waymo would need a ground transportation permit to operate at SFO, which has yet to be approved.

Waymo wants to bring robotaxis to SFO, emails show