Facebook-Parent Meta To Challenge Norway Fine Over User Privacy Violation, Data Collection For Ads

Norway's data regulator, Datatilsynet, argues that the manner and timing of Meta's proposed consent-seeking process remain uncertain.

Meta Platforms is set to appear in a Norwegian court on Tuesday to contest a substantial fine handed down by the country's data regulator. The fine, imposed on the parent company of Facebook and Instagram, pertains to the violation of user privacy and the subsequent use of harvested data for targeted advertising—a practice commonly referred to as behavioural advertising, especially prevalent among major tech corporations.

As of August 14, Meta Platforms has been subjected to a daily fine of 1 million Norwegian crowns (equivalent to $94,313) for its data-related transgressions. This case holds implications that extend beyond Norway's borders, potentially impacting other European nations.

In response to the penalties, Meta Platforms is seeking a temporary injunction against the ruling, which mandates daily fines until November 3rd.

In an official statement made on August 1, Meta expressed its intention to obtain user consent within the European Union and the European Economic Area (EEA) prior to engaging in behavioural advertising. The company stated via email to Reuters that it has already announced its intention to transition to the legal basis of Consent for personalised advertising for people in the EU and EEA.

Norway's data regulator, Datatilsynet, will vigorously defend its decision in court. The regulator argues that the manner and timing of Meta's proposed consent-seeking process remain uncertain. In the interim, Datatilsynet contends that users' rights continue to be infringed upon.

Tobias Judin, the head of the international section at Datatilsynet, conveyed the regulator's stance, stating that Datatilsynet will argue that there is no basis for an injunction.

Should Datatilsynet's decision be upheld, it could be elevated to permanent status by referral to the European Data Protection Board—a body endowed with the authority to make such determinations. This course of action could consequently expand the geographical scope of the decision to encompass the entirety of Europe. However, this step has not yet been taken by Datatilsynet.

The legal proceedings are scheduled to unfold over a two-day period at the Oslo district court.