The Court of Justice of the European Union ruled in a judgment over Meta's data collection practices that national competition authorities can determine infringement of the EU General Data Protection Regulation when examining competition cases. In its decision, the CJEU determined Meta "cannot justify, as a legitimate interest," data processing for personalized advertising "in the absence of the data subject's consent."
CJEU rules competition authorities can determine GDPR infringements
Related stories
Notes from the IAPP Canada: Ontario IPC shares enforcement philosophy with law students
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
What the new European Commission could mean for digital regulation
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments