The EU’s Data Protection Board (EDPB) has told large online platforms they should not offer users a binary choice between paying for a service and consenting to their personal data being used to provide targeted advertising.

In October last year, the social media giant said it would be possible to pay Meta to stop Instagram or Facebook feeds of personalized ads and prevent it from using personal data for marketing for users in the EU, EEA, or Switzerland. Meta then announced a subscription model of €9.99/month on the web or €12.99/month on iOS and Android for users who did not want their personal data used for targeted advertising.

At the time, Felix Mikolasch, data protection lawyer at noyb, said: “EU law requires that consent is the genuine free will of the user. Contrary to this law, Meta charges a ‘privacy fee’ of up to €250 per year if anyone dares to exercise their fundamental right to data protection.”

  • pearsaltchocolatebar@discuss.online
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    2 months ago

    You’re free to not use Facebook.

    Also, your argument breaks down because there are plenty of free streaming platforms that use targeted advertising as payment for their services.

    If anything, Facebook doing this is surprising because they’re making data collection opt-in.

    • ZeDoTelhado@lemmy.world
      link
      fedilink
      English
      arrow-up
      46
      ·
      2 months ago

      The biggest problem with this approach is basically Facebook saying that you have to pay for a right, meaning, if the law tells you that you can, and should, always have a say if you are followed around or not, you mist have that capability. What Facebook is doing is put a right behind a paywall, which is absurd

      • bleistift2@feddit.de
        link
        fedilink
        English
        arrow-up
        6
        ·
        2 months ago

        If I understand you correctly, you’re making the same argument as !snooggums@midwest.social above, so I’ll copy answer to them here:

        That is a completely different issue. On the one hand, meta does collect data on people who do not have an account. This is simply illegal, since that collection is neither necessary nor consented to. The EU should finally put a stop to that.

        On the other hand we have the voluntary relationship a user enters with facebook by creating an account. This is what the article is about and what I was referring to in my comment – the “binary choice between paying for a service and consenting to their personal data being used to provide targeted advertising”

        • humorlessrepost@lemmy.world
          cake
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          2 months ago

          Are there any rights you think should supersede contracts? If so, how do you draw the line between rights that do and don’t?

          • bleistift2@feddit.de
            link
            fedilink
            English
            arrow-up
            3
            ·
            2 months ago

            Are there any rights you think should supersede contracts? If so, how do you draw the line between rights that do and don’t?

            (I’ll answer your question in a comment side-chain, just because you asked.)

            Germans have the right to continued wage payments if they need to take care of family members (§616 BGB). However, that right can be voided in the employment contract.

            (§618 BGB) essentially states that the work environment must be reasonably safe. This cannot be voided by contract, as is codified in (§619 BGB).

            These are just instances. I do not know any general rules for the precedence of contracts over the law or vice versa.

              • bleistift2@feddit.de
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                2 months ago

                I’m not sure which meaning of ‘should be able to be voided’ you’re using. Do you mean ‘Why do think it’s legal to void it’ or ‘Why do you think it’s legitimate to be able to void it’?

                In the first case: My employment contract does exactly this. It’s become kind of a default clause in contracts. Researching this you’ll find a lot of websites (in German) that say that the clause is ‘abdingbar’ (which I translated as ‘voidable’).

                In the second case: I didn’t say I thought it legitimate, and I don’t have a strong opinion on this.

          • bleistift2@feddit.de
            link
            fedilink
            English
            arrow-up
            2
            ·
            2 months ago

            Are there any rights you think should supersede contracts?

            That is beside the point I’m making. Facebook acknowledges the right to privacy by giving you the choice to pay for the service rather than giving up your data. In my view, this should be completely acceptable by the GDPR. No-one is forcing you to sign up to facebook, so you do have a completely free choice to (1) either not give up your data and not use facebook; or (2) not give up your data and pay for the service; or (3) give up your data and pay for the service that way.

    • TheEntity@lemmy.world
      link
      fedilink
      English
      arrow-up
      26
      ·
      2 months ago

      Firstly, this is not “my argument”, this is EU’s argument.

      Secondly, none of these platforms present it as a choice between paying and giving the kind of consent that by law needs to be optional and freely given.

      Thirdly, being free to not use a service that is breaking the law does not make it any less illegal.

    • umbrella@lemmy.ml
      link
      fedilink
      English
      arrow-up
      12
      ·
      2 months ago

      not really, its so ubiquitous some of their services cant be not used.

      its impossible to exist in my country without whatsapp, most businesses do their customer service through whatsapp now.

    • BolexForSoup@kbin.social
      link
      fedilink
      arrow-up
      12
      ·
      edit-2
      2 months ago

      You’re free to not own or use a car. Should we have no rights when it comes to cars as well?

      You’re free to not use the internet. Should we have no rights online?

      • pearsaltchocolatebar@discuss.online
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago

        What right is being infringed upon? Facebook is saying your options to use a private service are to pay for it, or receive targeted advertising.

        You’re free to just not use any meta products like I do.

        • BolexForSoup@kbin.social
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          2 months ago

          It’s not about the advertising. It’s that you have to pay money to opt out of their aggressive data collection. The advertising is just one thing they do with your data.

          The EU’s Data Protection Board (EDPB) has told large online platforms they should not offer users a binary choice between paying for a service and consenting to their personal data being used to provide targeted advertising.

          It’s the first sentence of the article.

      • bleistift2@feddit.de
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 months ago

        You have the right to not own a car. But if you do, you must have insurance for it (in Germany, at least). You cannot hide behind GDPR and say “I have a right to my data. I must not be asked to give it to any insurer without my consent.” You also need to have a driver’s license with your name and photo on it. GDPR doesn’t protect you there, either.

        The bottom line is: Using a product may come with responsibilities or other concessions. You have the right to not use the product if the concessions aren’t worth it to you. You do not have the right to any product if you refuse the obligations that come with it.

        This is, of course, my own opinion based on my understanding of how the world should work.

        • BolexForSoup@kbin.social
          link
          fedilink
          arrow-up
          2
          ·
          edit-2
          2 months ago

          They can’t assign any concessions they wants that’s the entire point. You have rights you can’t sign away even if you want to. I mean dude you’re defending facebook, arguably the single worst company when it comes to respecting user data and privacy. Your assumption should be they are probably wrong until proven otherwise.

          • bleistift2@feddit.de
            link
            fedilink
            English
            arrow-up
            3
            ·
            2 months ago

            I mean dude you’re defending Meta, arguably the single worst company when it comes to respecting user data and privacy

            That’s argumentum ad hominem. If the law means what you think it means, it applies whether we’re talking about EvilCorp or SaveTheWhaleChildrenBeeFluff.

            Also recall the very first thing I said on this topic:

            I’m all for GDPR and really enjoy its protections, but I don’t understand this one.

            I’m playing devil’s advocate in order to gain insight, because I have no clue how this board reaches its conclusions.

            • BolexForSoup@kbin.social
              link
              fedilink
              arrow-up
              1
              ·
              edit-2
              2 months ago

              I’m playing Devil’s advocate

              Don’t it’s obnoxious and not insightful. It’s how teens test drive arguments without repercussions.

        • 0x0@programming.dev
          cake
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 months ago

          Oh, by the way… you have all those rights, but from now on you can only have them if you pay 10$/mo, otherwise we’ll take it upon ourselves to switching on all telemetry and cameras in your car and pass that data on to insurers and others.

          Actually… it doesn’t even qualify as analogy, more like premonition.

        • DrWeevilJammer@lemmy.ml
          link
          fedilink
          English
          arrow-up
          9
          ·
          2 months ago

          Not seeing ads for GEICO on your car’s dashboard doesn’t mean that Toyota isn’t gathering as much data as they can about you via the platform they built and then selling that information to GEICO.

          As well as information about who you are, Toyota can also collect your “driving behavior.” This includes information such as your “acceleration and speed, steering, and braking functionality, and travel direction.” It may also gather your in-vehicle preferences, favorite locations saved on its systems, and images gathered by external cameras or sensors.

          Some models of Toyota can also scan your face for face recognition when you enter one of its vehicles.

          Source

          • garrett@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            And that is totally unreasonable collection, of course. It’s also completely incomparable to pretending that Facebook is as necessary as a car (at least in America).

            • BolexForSoup@kbin.social
              link
              fedilink
              arrow-up
              1
              ·
              edit-2
              2 months ago

              If your bar is “we only have rights when it comes to things that we can’t live without“ then not only are you creating your own arbitrary standards that is not reflected in our society, but you should be angry if you think that’s how things work.

              You have rights dude. Stop trying to win an online argument/defending business in such a bizarre way. There are limits to what they can do whether they re essential services or not.

              Besides, you have kind of lost the thread here. It’s not about whether or not they can advertise or charge. It’s about how they collect and use your data in service of advertising (and more). It’s in the first sentence of the article.

              The EU’s Data Protection Board (EDPB) has told large online platforms they should not offer users a binary choice between paying for a service and consenting to their personal data being used to provide targeted advertising.

              Facebook is free to have an ad tier and a pay tier. It’s about the data they collect and how it’s used.

        • BolexForSoup@kbin.social
          link
          fedilink
          arrow-up
          4
          ·
          edit-2
          2 months ago

          What does the monetization scheme have to do with whether or not we have consumer and privacy rights beyond how it infringes on them?

          • garrett@infosec.pub
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            The point was that it’s apples to oranges. Monetization is kinda the key issue here unless you’re ready to declare Facebook a utility and publicly fund it. Personally, I’d rather we be rid of it entirely.

              • garrett@infosec.pub
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 months ago

                Of course ad-supported services are infringing on your privacy in a way but if you’re not ready to call Facebook a publicly-funded utility, it’s childish to act like it’s so essential that it should be entirely ad-free with no paid tier.

                • BolexForSoup@kbin.social
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  edit-2
                  2 months ago

                  You are presenting a false dichotomy and ads do not have to infringe on your privacy to the degree Facebook does it. There are gradients.

                  You’re reducing these arguments so much they’re losing the nuance that warrants the entire discussion. You’re also calling me childish to boot, which doesn’t give me much hope for the rest of this conversation

                  • garrett@infosec.pub
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    2 months ago

                    That is a valid, nuanced take that this article and (seemingly) the legislation don’t get into.