THE BOTTOM LINE
- Your Consent Model is at Risk: The common practice of forcing users to consent to personal data processing (e.g., for targeted ads) in exchange for access to a service is facing a major legal challenge. An Advocate General at the EU’s top court has found this model may not comply with the GDPR.
- “Pay for Privacy” May Be the New Reality: Dominant companies could soon be required to offer users an equivalent alternative to their service that doesn’t require data processing consent, potentially in the form of a paid subscription.
- Immediate Review Required: This opinion, while not a final judgment, is a strong indicator of the court’s direction. All businesses relying on bundled consent for data-driven revenue should immediately review their terms of service and business models.
THE DETAILS
The fundamental question before the Court of Justice of the European Union (CJEU) was whether user consent can truly be “freely given” under the GDPR if the only alternative to acceptance is being locked out of a service. The case, brought against Meta Platforms Ireland, challenges its practice of requiring users to agree to its data processing terms—including for personalized advertising—to access their Facebook accounts. In an influential opinion, Advocate General Rantos has advised the Court that this “all-or-nothing” approach is incompatible with the principle of free consent.
The Advocate General’s reasoning focuses on the significant imbalance of power between a dominant digital platform and the individual user. He argues that when a user is faced with the prospect of losing access to a vast social network, which may be central to their social and professional life, the choice to consent is not free but is made under duress. The risk of such a significant “detriment”—being cut off from their network—effectively coerces the user into agreeing. This pressure, he concludes, invalidates the consent under the stringent requirements of the GDPR.
Perhaps the opinion’s most commercially significant point is the Advocate General’s proposed solution. He suggests that for consent to be considered free, the user must be offered an “equivalent alternative” that does not involve consenting to the data processing in question. Crucially, he notes this alternative could be provided “in return for a fair fee.” This opens the door to a freemium model, where a free, ad-supported service requires data consent, while a paid version allows users to access the same service without such data processing. This opinion signals a major potential shift in the digital economy, forcing dominant players to evolve beyond a binary choice and offer users genuine control over their data.
SOURCE
Source: Court of Justice of the European Union
