noyb sends Meta 'cease and desist' letter over AI training. European Class Action as potential next step

Forced Consent & Consent Bypass Meta has announced it will use EU personal data from Instagram and Facebook users to train its new AI systems from 27 May onwards.

Legitimate Interest Social Media Personal Data Consent Artificial Intelligence

May 14, 2025Sourcenoyb.eu

Full text

Forced Consent & Consent Bypass Meta has announced it will use EU personal data from Instagram and Facebook users to train its new AI systems from 27 May onwards. Instead of asking consumers for opt-in consent, Meta relies on an alleged 'legitimate interest' to just suck up all user data. The new EU Collective Redress Directive allows Qualified Entities such as noyb to issue EU-wide injunctions. As a first step, noyb has now sent a formal settlement proposal in the form of a so-called Cease and Desist letter to Meta. Other consumer groups also take action. If injunctions are filed and won, Meta may also be liable for damages to consumers, which could be brought in a separate EU class action. Damages could reach billions. In summary, Meta may face massive legal risks – just because it relies on an "opt-out" instead of an "opt-in" system for AI training. noyb's Cease and Desist Letter to Meta IrelandReuters report about noyb's cease and desist letterPress Release by the German VZ NRW on

How it connects

Related across sources

C-40/17 Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW eV C-40/17 (Fashion ID) CJEU Jul 29, 2019 Controllers IP Address Legitimate Interest

Guidelines 8/2020 targeting of social media users Guidelines ·EDPB Apr 13, 2021 Marketing IP Address Data Portability

C-13/16 Valsts policijas Rīgas reģiona pārvaldes Kārtības policijas pārvalde v Rīgas pašvaldības SIA "Rīgas satiksme" In Case C-13/16, the Court of Justice of the European Union (Second Chamber) addressed a preliminary ruling from the Latvian Supreme Court in proceedings between the Riga Regional… CJEU ·Second Chamber May 4, 2017 Legitimate Interest Personal Data Lawful Basis

C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield International Transfer Supervision

C-212/13 František Ryneš v Úřad pro ochranu osobních údajů The Court of Justice of the European Union (Fourth Chamber) addressed whether operating a camera system on a residential property that records images of individuals passing by… CJEU ·Fourth Chamber Dec 11, 2014 Material scope (GDPR) Personal Data IP Address

C-73/16 Peter Puškár v Finančné riaditeľstvo Slovenskej republiky and Kriminálny úrad finančnej správy In Case C-73/16, the Court of Justice of the European Union addressed a preliminary reference from the Slovak Supreme Court concerning Peter Puškár's challenge to his inclusion on… CJEU ·Second Chamber Sep 27, 2017 GDPR Article 5 Principles of Processing Personal Data Legitimate Interest