THE BOTTOM LINE
- The “consent or get no service” model for personalized advertising is now presumed invalid for companies with a dominant market position under the GDPR.
- To obtain valid consent, dominant firms must offer users an “equivalent alternative” that does not require such data processing, and this alternative must be offered without an additional fee.
- The burden of proof has shifted: it is now on the dominant company to demonstrate that a user’s consent was genuinely and freely given, a significantly higher legal bar.
THE DETAILS
The Court of Justice of the European Union (CJEU) has delivered a landmark ruling with profound implications for the digital advertising business model. In a case concerning Meta Platforms, the court addressed a critical question: can a company with a dominant market position make access to its services conditional on a user’s consent to process their personal data for behavioral advertising? The court’s answer is a clear “no.” It establishes a rebuttable presumption that such consent is not “freely given” as required by the GDPR. This decision directly challenges the foundational “take-it-or-leave-it” approach to data consent that many major online platforms have relied upon for years.
The legal reasoning hinges on the concept of a power imbalance. The court recognized that when a platform holds a dominant market position, users often have no realistic alternative for services like social networking. This creates a situation where a user might feel compelled to agree to data processing simply to avoid significant disadvantages, such as social or professional exclusion. According to the CJEU, this element of compulsion is fundamentally at odds with the GDPR’s requirement for consent to be a genuine and free expression of the user’s will. The judgment effectively states that market dominance creates a high risk of coercion, invalidating consent by default unless the company can prove otherwise.
Looking ahead, the ruling provides a narrow path forward for dominant companies. To overcome the presumption of invalidity, they must prove that consent was, in fact, freely given. The most direct way to do this, the court suggests, is by offering users an “equivalent alternative” that does not involve the processing of their personal data for advertising purposes. Crucially, this alternative must be provided without levying an extra charge. The court did leave a sliver of ambiguity, noting that an “appropriate fee” might be permissible if “necessary,” but the primary expectation is a free alternative. This puts pressure on dominant firms to fundamentally rethink their service tiers and data monetization strategies to ensure compliance.
SOURCE
Source: Court of Justice of the European Union
