Facebook Ireland – Court Ruling (Italy, 2021)

Court Ruling
DPA TARdelLazio18 February 2021Italy
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Italian court found that Facebook misled users by not clearly informing them about how their data would be used commercially. The court agreed that Facebook's registration process was misleading but disagreed on the aggressive nature of its consent practices. This case emphasizes the need for clear communication about data usage.

What happened

Facebook misled users by not adequately informing them about the commercial use of their data.

Who was affected

Facebook users who were not clearly informed about how their data would be used.

What the authority found

The court agreed Facebook misled users about data use but found the consent process was not aggressive.

Why this matters

This ruling stresses the importance of transparency in how companies communicate data usage to users. Businesses should ensure their data practices are clearly explained to avoid misleading users.

GDPR Articles Cited

National Law Articles

Codice del Consumo
Decision AuthorityCdS
Reviewed AuthorityTAR del Lazio (Italy)
Full Legal Summary
Detailed

On the 29th of November 2018, following a complaint filed by three consumer associations, the Italian Competition Authority (Autorità Garante della Concorrenza e del Mercato – AGCM) adopted a decision against Facebook Inc. and Facebook Ireland. The Authority found that Facebook engaged in an unfair commercial practice towards its users by failing to inform them adequately and immediately about the commercial nature of the processing of their personal data, while emphasizing that registering to the platform was free of charge. For this reason, Facebook Inc. received a fine of € 5,000,000. The AGCM also found that Facebook engaged in an aggressive commercial practice towards its users by unduly influencing its users’ preference concerning the processing of data for commercial purposes. This was done by pre-selecting the option to consent to sharing data with third parties, while presenting them with the prospect of significant limitations in case they de-select such options. For this reason, Facebook Ireland received a fine of € 5,000,000. On the 18th of December 2019, the Regional Administrative Tribunal (Tribunale Amministrativo Regionale – TAR) of Lazio partially upheld two separate appeals brought by Facebook Inc. and Facebook Ireland. On the one hand, the TAR agreed with AGCM findings that Facebook misled its users into registering to the Facebook platform “for free”, without providing adequate and timely information about the commercial use of their personal data. On the other hand, the Tribunal found that the pre-selected options provided to Facebook’s users during their registration does not actually gather their consent to the transfer of data to third parties. This actually occurs at a later stage and on a granular level. Moreover, the TAR found that the AGCM failed in properly demonstrating the aggressive nature of such practice, and how it influenced the choices of the users. Both Facebook and the AGCM appealed against the TAR decision. Among others, Fa

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Facebook Ireland in IT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

18 February 2021

Authority

DPA TARdelLazio

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Facebook Ireland - Italy (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: