Keywords
personal data
behavioral data
predictive AI
GDPR
very large digital platforms
Abstract
The study addresses the problematics of identifying pertinent legal justifications for the processing of users’ personal data by very large digital platforms, as these issues were reflected in the CJEU decision of July 4, 2023, in case C-252/21, Meta Platforms Inc. The decision of the CJEU will have massive reverberations on the manner under which national courts and supervisory authorities with competencies in the matter of controlling the processing of personal information will apply the provisions of art. 9, 1st para. GDPR, for cookie technologies that select browsing data on the websites of commercial partners of an oversized digital platform and that involve the storage of “special categories of personal data”, prohibiting the processing operations which concern these categories. On the second level, the CJEU decision marks the impossibility, for digital platforms, of selecting legal grounds such as the performance of the contract or the legitimate interest of the data operator, when collecting personal data and, especially, behavioral data of users, in contexts that are irreconcilable with the genuine necessity of performing contractual obligations.
References
BOERMAN Sophie C., KRUIKEMEIER Sanne, BOL Nadine, „When is personalized advertising crossing personal boundaries? How type of information, data sharing, and personalized pricing influence consumer perceptions of personalized advertising”, Computers in Human Behavior Reports, n. 4, 2021, online: https://www.sciencedirect.com/science/article/pii/S2451958821000920;
BOTES Marietjie, „Autonomy and the social dilemma of online manipulative behavior”, AI and Ethics, vol. 3, n. 1, 2023, pp. 315-323, online: https://doi.org/10.1007/s43681-022-00157-5;
BRENNCKE Martin, „A Theory of Exploitation for Consumer Law: Online Choice Architectures, Dark Patterns, and Autonomy Violations” (December 15, 2023), Journal of Consumer Policy, online: https://ssrn.com/abstract=4665868 și https://doi.org/10.1007/s10603-023-09554-7;
BREWCZYŃSKA Magdalena, „Between Legitimacy and Lawfulness: In Search of Rationality and Consistency in EU Data Protection”, European Data Protection Law Review, vol. 9, n. 2, 2023, pp. 112-122, online: https://doi.org/10.21552/edpl/2023/2/6;
BUYTAERT Tom, DE MEYERE Jean, „Arrêt «Meta Platforms»: violation du RGPD constitutive d’un abus de position dominante”, Journal de droit européen, n. 9, 2023, pp. 449-452;
CAMPOS CARVALHO Joana, „Online platforms: concept, role in the conclusion of contracts and current legal framework in Europe”, Cuadernos de Derecho Transnacional, vol. 12, n. 1, 2020, pp. 863‑874, online: https://doi.org/10.20318/cdt.2020.5227;
CHEN Jiahong, Regulating Online Behavioural Advertising Through Data Protection Law, Edward Elgar Publishing, Cheltenham, 2021;
CHEN Zirou, SHI Mengze, „Predictive Accuracy, Search Intensity, and Personalized Advertising” (December 10, 2022), online: https://ssrn.com/abstract=4298841 și http://dx.doi.org/10.2139/ssrn.4298841;
CHIARA Pier Giorgio, „The Balance Between Security, Privacy and Data Protection in IoT Data Sharing”, European Data Protection Law Review, vol. 7, n. 1, 2021, pp. 18-30, online: https://doi.org/10.21552/edpl/2021/1/6 și https://edpl.lexxion.eu/article/EDPL/2021/1/6;
CUSTERS Bart, VRABEC Helena, FRIEDEWALD Michael, „Assessing the Legal and Ethical Impact of Data Reuse”, European Data Protection Law Review, vol. 5, n. 3, 2019, pp. 317-337, online: https://doi.org/10.21552/edpl/2019/3/7;
DALLA CORTE Lorenzo, „On proportionality in the data protection jurisprudence of the CJEU”, International Data Privacy Law, vol. 12, n. 4, 2022, pp. 259–275, online: https://academic.oup.com/idpl/advance-article-abstract/ și https://doi.org/10.1093/idpl/ipac014;
DAVOLA Antonio, „Fostering Consumer Protection in the Granular Market: The Role of Rules on Consent, Misrepresentation and Fraud in Regulating Personalized Practices”, Amsterdam Law School Research Paper No. 2021-07, Technology and Regulation, Special Issue: Should Data Drive Private Law, 2022, pp. 76-86, online: https://techreg.org/article/view/11177/12407 și https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3791265;
DE GRAAF Tycho, „Consequences of Nullifying an Agreement on Account of Personalised Pricing”, Journal of European Consumer and Market Law (EuCML), vol. 8, n. 5, 2019, pp. 1051-1073;
DUIVENVOORDE Bram, „Redesigning the UCPD for the Age of Personalised Marketing”, Journal of European Consumer and Market Law (EuCML), vol. 12, n. 5, 2023, pp. 177-184, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/12.2/EuCML2023036;
DUIVENVOORDE Bram, „The Liability of Online Marketplaces under the Unfair Commercial Practices Directive, the E-commerce Directive and the Digital Services Act”, Journal of European Consumer and Market Law, vol. 11, n. 2, 2022, pp. 43-52, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/11.2/EuCML2022009;
EDPB ((European Data Protection Board) Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them, Version 2.0, Adopted on 14 February 2023, online: https://edpb.europa.eu/system/files/2023-02/edpb_03-2022_guidelines_on_deceptive_design_patterns_in_social_media_platform_interfaces_v2_en_0.pdf;
„EDPB publishes urgent binding decision regarding Meta”, 07.12.2023, Bruxelles, online: https://edpb.europa.eu/news/news/2023/edpb-publishes-urgent-binding-decision-regarding-meta_en;
European Commission, Press Release, „Digital Services Act: Commission designates first set of Very Large Online Platforms and Search Engines”, 25 April 2023, online: https://ec.europa.eu/commission/presscorner/detail/en/IP_23_2413;
FERNANDEZ Maryant, PANT Sebastien, „Why it’s time to ban surveillance ads” (November 15, 2021), The European Consumer Organisation (BEUC) Blog, online: https://www.beuc.eu/blog/why-its-time-to-ban-surveillance-ads/;
GOICOVICI Juanita, „The collecting of consent to the processing of children’s personal data, between volatility and disobedience”, SHS Web of Conferences, vol. 177, n. 04001, 2023, online: https://www.shs-conferences.org/articles/shsconf/pdf/2023/26/shsconf_copeji2023_04001.pdf;
GOICOVICI Juanita, Dreptul relațiilor dintre profesioniști și consumatori, Hamangiu, București, 2022;
GOICOVICI Juanita, Unilateral Termination and Adjustment of the Consumer Contract on Digital Content, Regional Law Review, vol. 2, 2021, pp. 283-296, online: https://doi.org/10.18485/iup_rlrc.2021.2.ch17;
GOICOVICI Juanita, „Clauzele privind drepturile consumatorilor în contractele de servicii cloud computing”, Revista Română de Drept Privat, n. 2/2019, pp. 399-415;
GOICOVICI Juanita, „Consimțământul consumatorului la prelucrarea datelor personale în contractele business to consumer–condiția consimțământului granular”, Analele Universității de Vest din Timișoara, Seria Drept, n. 2, 2019, pp. 7-24, online: https://drept.uvt.ro/administrare/files/1634395962-articol-juanita-goicovici.pdf;
GOICOVICI Juanita, „Portabilitatea datelor cu caracter personal, prin prisma dispozițiilor RGDP și ale Directivei 2019/770: este gambitul reginei mutarea de deschidere adecvată?”, Analele Științifice ale Universității „Alexandru Ioan Cuza” din Iași, Seria Științe Juridice, Tomul LXVII, Supliment 2, 2021, pp. 57-80, online: http://pub.law.uaic.ro/files/articole/2021/vol.2_2/4.goicovici.pdf;
GOICOVICI Juanita, „Granularity and specificity of consent and implications thereof for the data controller in the light of the principle of ‘purpose limitation’”, InterEULawEast: Journal for the International and European Law, Economics and Market Integrations, vol. 9, n. 2, 2022, pp. 43-69, online: https://hrcak.srce.hr/293334;
GOICOVICI Juanita, „Prelucrarea datelor personale sensibile indirecte din declarațiile fiscale privind conflictele de interese”, Studia Universitatis Babes Bolyai Iurisprudentia, vol. 67, n. 4, 2022, pp. 13-54, online: https://doi.org/10.24193/SUBBiur.67(2022).4.1;
GOICOVICI Juanita, „Retractarea consimțământului consumatorului în contractele electronice: Golemul perfect, reflectat în jurisprudența recentă”, Revista Română de Drept Privat, n. 1, 2022, pp. 304-328;
GOICOVICI Juanita, „The Traders’ Liability for Lack of Conformity of the Digital Content and of the Digital Services, as Regulated by Directive (EU) 2019/770”, Analele Științifice ale Universităţii Alexandru Ioan Cuza din Iași, seria Ştiinţe Juridice, vol. 66, n. 1 bis, 2020, pp. 79-98, online: https://pub.law.uaic.ro/ro/volume-publicate/2020/anale-uaic-tomul-lxvi-tiine-juridice-supliment/juanita-goicovici;
GOICOVICI Juanita, „Elementele constitutive ale practicilor comerciale neloiale în relațiile cu consumatorii”, Studia Universitatis Babes Bolyai Iurisprudentia, n. 3, 2016, pp. 88-100, online: http://arhiva-studia.law.ubbcluj.ro/pdfs/1488469330-04Goicovici_88_100.pdf;
GRIFFIN Rachel, „Tackling Discrimination in Targeted Advertising: US regulators take very small steps in the right direction – but where is the EU?” (June 23, 2022), online: https://verfassungsblog.de/targeted-ad/ și https://doi.org/10.17176/20220623-153440-0;
HAHN Isabel, „Purpose Limitation in the Time of Data Power: Is There a Way Forward?”, European Data Protection, vol. 7, n. 1, 2021, pp. 31-44, online: https://doi.org/10.21552/edpl/2021/1/7;
HERMANN Erik, „Psychological targeting: nudge or boost to foster mindful and sustainable consumption?”, AI & Society, vol. 38, n. 2, 2023, pp. 961-962, online: https://doi.org/10.1007/s00146-022-01403-4;
HINSCH Wilfried, „Differences That Make a Difference: Computational Profiling and Fairness to Individuals”, în Voeneky S., Kellmeyer P., Mueller O., Burgard W. (coord.), The Cambridge Handbook of Responsible Artificial Intelligence: Interdisciplinary Perspectives, Cambridge University Press, Cambridge, 2022, pp. 229-251, DOI:10.1017/9781009207898.019.
HRISCU Ana-Maria, „C 252/21 Meta v Bundeskartellamt: The Lawfulness of Big Tech’s Processing of Personal Data and the Relationship Between Data Protection and Competition Law”, European Data Protection Law Review, vol. 9, n. 3, 2023, pp. 371-377;
IYER Pooja, „Consumer Data and Privacy Fiduciaries: A Comparison Based on Balance of Power and Consumer Agency” (August 1, 2023), online: https://ssrn.com/abstract=4528526 și http://dx.doi.org/10.2139/ssrn.4528526;
JABŁONOWSKA Agnieszka, „Consumer Protection in the Age of Data-Driven Behaviour Modification”, Journal of European Consumer and Market Law, vol. 11, n. 2, 2022, pp. 67-71, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/11.2/EuCML2022012;
JAROVSKY Luiza, „Dark Patterns in Personal Data Collection: Definition, Taxonomy and Lawfulness” (March 1, 2022), online: https://ssrn.com/abstract=4048582 și http://dx.doi.org/10.2139/ssrn.4048582;
JAROVSKY Luiza, „Transparency by Design: Reducing Informational Vulnerabilities Through UX Design” (May 25, 2022), online: https://ssrn.com/abstract=4119284;
JAROVSKY Luiza, „Improving Consent in Information Privacy through Autonomy-Preserving Protective Measures (APPMs)”, European Data Protection Law Review, vol. 4, n. 4, 2018, pp. 447-458, online: https://doi.org/10.21552/edpl/2018/4/7;
JASMONTAITE Lina, KAMARA Irene, ZANFIR-FORTUNA Gabriela, LEUCCI Stefano, „Data Protection by Design and by Default: Framing Guiding Principles into Legal Obligations in the GDPR”, European Data Protection Law Review, vol. 4, n. 2, 2018, pp. 168-189, online: https://doi.org/10.21552/edpl/2018/2/7;
KELLER Perry, „After Third Party Tracking: Regulating the Harms of Behavioural Advertising Through Consumer Data Protection” (May 4, 2022), online: https://ssrn.com/abstract=4115750 și http://dx.doi.org/10.2139/ssrn.4115750;
LAFEVER Gary, „Beyond GDPR: Unauthorized reidentification and the Mosaic Effect in the EU AI Act” (10 aug. 2023), online: https://iapp.org/news/a/beyond-gdpr-unauthorized-reidentification-and-the-mosaic-effect-in-the-eu-ai-act/;
LEISER Mark, „Protecting Children from Dark Patterns and Deceptive Design” (December 11, 2023), online: https://ssrn.com/abstract=4660222;
LI Zihao, „Affinity-Based Algorithmic Pricing: A Dilemma for EU Data Protection Law”, Computer Law & Security Review, vol. 46, 2022 online: https://ssrn.com/abstract=4144571 și http://dx.doi.org/10.2139/ssrn.4144571;
LUGURI Jamie, STRAHILEVITZ Lior, „Shining a Light on Dark Patterns”, Journal of Legal Analysis, vol. 43, n. 12, 2021, online: https://ssrn.com/abstract=3431205 și http://dx.doi.org/10.2139/ssrn.3431205;
LUZAK Joasia, „Tomorrow Never Dies: VLOPs debacle” (24 aug. 2023) online: https://recent-ecl.blogspot.com/2023/08/tomorrow-never-dies-vlops-debacle.html;
MÄIHÄNIEMI Beata, „The role of behavioural economics in shaping remedies for Facebook’s excessive data gathering”, Computer Law & Security Review, vol. 46, 2022, online: https://www.sciencedirect.com/science/article/pii/S0267364922000565;
NEBBIA Paolisa, „The interaction of competition, consumer and data protection laws: a few comments inspired by the recent case law of the Court of Justice of the European Union”, ERA-Forum: Scripta Iuris Europaei, vol. 23, n. 4, 2023, pp. 515-527;
PICHT Peter Georg, „CJEU on Facebook: GDPR processing justifications and application competence: EuGH, Urt. vom 4.7.2023: C 252/21”, Gewerblicher Rechtsschutz und Urheberrecht, 2023, pp. 1169-1172;
POLAT Cemre, ÖZÇELIK Barış, „Locating Online Platforms in the Right Place: Between the Digital Services Act and the Liability Law”, Journal of European Consumer and Market Law, vol. 12, n. 4, 2023, pp. 168-172, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/12.4/EuCML2023034;
POTEL-SAVILLE Marie, LECHEVALIER Fabien, „Comment les dark patterns manipulent nos usages mobiles? Proposition de régulation pour un digital durable et centré sur l’humain”, în Hanitra Randrianasolo Rakotobe, Jean-Michel Ledjou (coord.), Nouveaux enjeux liés aux usages des applications et des services mobiles: Quelles opportunités et quels risques?, ACFAS Symposium, L’Harmattan, Paris, 2023, online : https://ssrn.com/abstract=4652956;
RIZZUTO Francesco, „The implications of the Meta Ireland Platforms ruling for the powers of national competition authorities and national regulatory and supervisory authorities”, European Competition Law Review, vol. 44, n. 12, 2023, pp. 532-538;
ROTT Peter, STRYCHARZ Joanna, ALLEWELDT Frank, „Personalised pricing”, Study requested by the European Parliament, Policy Department for Economic, Scientific and Quality of Life Policies, Directorate-General for Internal Policies (November 2022, Luxembourg), online: https://www.europarl.europa.eu/RegData/etudes/STUD/2022/734008/IPOL_STU(2022)734008_EN.pdf;
SCHÖNAU Andreas, „Agency in augmented reality: exploring the ethics of Facebook’s AI-powered predictive recommendation system”, AI and Ethics, vol. 3, n. 2, 2023, pp. 407-417, online: https://doi.org/10.1007/s43681-022-00158-4;
SEELE Peter, DIERKSMEIER Claus, HOFSTETTER Reto, SCHULTZ Mario, „Mapping the ethicality of algorithmic pricing: A review of dynamic and personalized pricing”, Journal of Business Ethics, vol. 170, n. 4, 2021, pp. 697-702, online: https://doi.org/10.1007/s10551-019-04371-w;
SENFTLEBEN Martin, „Trademark Law, AI-Driven Behavioural Advertising, and the Digital Services Act – Towards Source and Parameter Transparency for Consumers, Brand Owners and Competitors”, în Ryan ABBOTT (coord.), Research Handbook on Intellectual Property and Artificial Intelligence, Edward Elgar, Cheltenham, 2022, pp. 309-324, online: https://ssrn.com/abstract=3947739 și http://dx.doi.org/10.2139/ssrn.3947739;
SOH Sheng Yin, „Privacy Nudges: An Alternative Regulatory Mechanism to ‘Informed Consent’ for Online Data Protection Behaviour”, European Data Protection Law Review, vol. 5, n. 1, 2019, pp. 65-74, online: https://doi.org/10.21552/edpl/2019/1/10;
SZILÁGYI Ferenc, „Personal Data as Consideration for the Facebook Service”, Journal of European Consumer and Market Law, vol. 11, n. 4, 2022, pp. 154-161, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/11.4/EuCML2022026;
VAN EIJK Nico, HOOFNAGLE Chris Jay, KANNEKENS Emilie, „Unfair Commercial Practices: A Complementary Approach to Privacy Protection”, European Data Protection Law Review, vol. 3, n. 3, 2017, pp. 325-337, online: https://doi.org/10.21552/edpl/2017/3/7 și https://edpl.lexxion.eu/article/EDPL/2017/3/7;
VAZIRI Ali, „Is this the end of consent-less tracking by online platforms in the EU?” (27 iul. 2023), online: https://iapp.org/news/a/is-this-the-end-of-consent-less-tracking-by-online-platforms-in-the-eu/;
VEALE Michael, NOUWENS Midas, SANTOS Cristiana, „Impossible Asks: Can the Transparency and Consent Framework Ever Authorise Real-Time Bidding After the Belgian DPA Decision?”, Technology and Regulation, 2022, online: https://doi.org/10.26116/techreg.2022.002 și https://techreg.org/article/view/11594;
WEBER Rolf H., „The Disclosure Dream – Towards a New Transparency Concept in EU Consumer Law”, Journal of European Consumer and Market Law, vol. 12, n. 2, 2023, pp. 67-70, online: https://kluwerlawonline.com/journalarticle/Journal+of+European+Consumer+and+Market+Law/12.2/EuCML2023018;
ZARDIASHVILI Alexander, SEARS Alan M., „Targeted Advertising and Consumer Protection Law in the EU”, Vanderbilt Journal of Transnational Law, vol. 56, n. 3, 2023, online: https://ssrn.com/abstract=4249743.
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.