CJEU declares Meta/Facebook's GDPR approach largely illegal

The GDPR allows for six legal bases to process personal data. In the case Meta v Bundeskartellamt, the CJEU has today ruled on all of them - further clarifying the interpretation of the GDPR. The CJEU has largely closed the doors for Meta to use personal data beyond what is strictly necessary to provide the core products (such as messaging or sharing content) - all other processing (like advertisement and sharing personal data) requires freely given and fair consent by users. Judgment in German and FrenchCJEU Press ReleasePrevious decision by the EDPB leading to a € 320 million fineBackground on the "forced consent" approach by MetaBackground on Meta's move to "legitimate interest"First Statement. noyb still has to study the details of this massive judgment. From the live reading of the holding, it seems that Meta/Facebook was barred from using anything but consent for crucial operations that it relies on to make profits in Europe.Max Schrems: "We welcome the CJEU decision. It further