Key Takeaways
- Ireland's privacy regulator fined Meta $411 million for violating the E.U. privacy law known as the General Data Protection Regulation (GDPR).
- The ruling could force Meta to allow users to opt out of data-directed personalized ads.
- Meta has said it will appeal the ruling.
A European Union privacy regulator fined Meta 390 million euros ($411 million) on Wednesday for violating E.U. privacy laws by sending targeted advertisements to Facebook and Instagram users based on their online activity.
Meta said it will appeal the Ireland Data Protection Commission's fine and the ruling, the latest blow to the firm's traditional business model. If courts uphold it, the decision would hinder the digital advertising industry's revenue stream, requiring Meta and other platforms to allow users to opt out of ads targeting their interaction on platform apps.
The commission said a board representing all EU privacy regulators last month ordered it to issue the ruling. Meta has maintained that its contracts with users allow the ads, but the decision gives Meta three months to halt the practice of using those contracts as justification for the practice.
Another Revenue Challenge
Meta and other platform operators use data collected on their own apps to help advertisers target users based on that information. Analysts estimate that if a significant number of people opted out of receiving ads based on their activity, Meta's advertising revenue could fall by as much as 20%.
The decision marks the latest landmark challenge to Meta's revenue model. In 2021, Apple began specifically asking iPhone customers if they want to prevent apps from tracking their online activity. As more users chose to do so, Meta last year posted the first quarterly revenue decline in its history, and its stock plunged 64%.
Now, a recent class action suit in California accuses the firm of trying to circumvent Apple's "opt out" feature by collecting data from built-in Facebook or Instagram browsers that open when a user clicks on a specific site's Facebook or Instagram page. Meta denies those allegations.
Wednesday's ruling, handed down by the Ireland commission because Meta's E.U. headquarters are in Dublin, portends a protracted legal battle. It also comes after Ireland fined Meta $275 million in November for a data leak that led the personal information of more than 500 million Facebook users to be published online.
Meanwhile, later this year, the E.U. Court of Justice is expected to rule on additional Meta data-collection practices.