Published On: Sat, Jul 3rd, 2021

Dutch justice will hear another Facebook remoteness lawsuit

Privacy lawsuit that’s being brought opposite Facebook by dual not-for-profits in a Netherlands can go ahead, an Amsterdam justice has ruled. The box will be listened in October.

Since 2019, a Amsterdam-based Data Privacy Foundation (DPS) has been seeking to move a box opposite Facebook over a prevalent collection of Internet users’ information — arguing a association does not have a correct authorised basement for a processing.

It has been assimilated in a movement by a Dutch consumer insurance not-for-profit, Consumentenbond.

The span are seeking calibrate for Facebook users in a Netherlands for purported violations of their remoteness rights — both by suing for remuneration for individuals; and job for Facebook to finish a privacy-hostile practices.

European Union law allows for common calibrate opposite a series of areas, including information insurance rights, enabling competent entities to move deputy actions on interest of rights holders. And the provision looks like an increasingly critical apparatus for furthering remoteness coercion in a bloc, given how European information insurance regulators’ have continued to miss uniform vitality in support rights set out in legislation such as a General Data Protection Regulation (which, notwithstanding entrance into focus in 2018, has nonetheless to be severely practical opposite height giants like Facebook).

Returning to a Dutch litigation, Facebook denies any abuse and claims it respects user remoteness and provides people with “meaningful control” over how their information gets exploited.

But it has fought a lawsuit by seeking to retard it on procedural drift — arguing for a fit to be tossed by claiming a DPS does not fit a criteria for bringing a remoteness explain on interest of others and that a Amsterdam justice has no office as a European business is theme to Irish, rather than Dutch, law.

However a Amsterdam District Court deserted a arguments, clearing a approach for a lawsuit to proceed.

Contacted for criticism on a ruling, a Facebook orator told us:

We are now reviewing a Court’s decision. The statute was about a procedural partial of a case, not a anticipating on a merits of a action, and we will continue to urge a position in court. We caring about a users in a Netherlands and safeguarding their remoteness is critical to us. We build products to assistance people bond with people and calm they caring about while honoring their remoteness choices. Users have suggestive control over a information that they share on Facebook and we yield clarity around how their information is used. We also offer people collection to access, download, and undo their information and we are committed to a beliefs of GDPR.

In a matter today, a Consumentenbond‘s director, Sandra Molenaar, described a statute as “a large boost for a some-more than 10 million victims” of Facebook’s practices in a country.

“Facebook has attempted to chuck adult all kinds of authorised hurdles and to check this box as many as probable though opportunely a association has not succeeded. Now we can unequivocally get to work and safeguard that consumers get what they are entitled to,” she combined in a combined remarks (translated from Dutch with Google Translate).

In another ancillary statement, Dick Bouma, management of DPS, added: “This is a good and critical initial step for a court. The statute shows that it pays to take a common mount opposite tech giants that violate remoteness rights.”

The dual not-for-profits are propelling Facebook users in a Netherlands to pointer adult to be partial of a deputy movement (and potentially accept compensation) — observant some-more than 185,000 people have purebred so far.

The fit argues that Facebook users are “paying” for a “free” use with their information — contending a tech hulk does not have a current authorised basement to routine people’s information given it has not supposing users with extensive information about a information it is entertainment from and on them, nor what it does with it.

So — in hint — a evidence is that Facebook’s tracking and targeting is in crack of EU remoteness law.

The authorised plea follows an progressing review (back in 2014) of Facebook’s business by a Dutch information insurance management that identified problems with a remoteness routine and — in a 2017 news — found a association to be estimate users’ information but their trust or consent.

However, given 2018, Europe’s GDPR has been in focus and a “one-stop-shop” resource baked into a law — to streamline a doing of cross-border cases — has meant complaints opposite Facebook have been funnelled by Ireland’s Data Protection Commission. The Irish DPC has nonetheless to emanate a singular preference opposite Facebook notwithstanding receiving scores of complaints. (And it’s critical that  “forced consent” complaints were filed opposite Facebook a day GDPR begun being practical — nonetheless still sojourn uncertain by Ireland.)

The GDPR’s coercion bottleneck creates common calibrate actions, such as this one in a Netherlands a potentially critical track for Europeans to get rights use opposite absolute platforms that find to cringe a risk of regulatory coercion around forum shopping.

Although inhabitant manners — and courts’ interpretations of them — can vary. So a probability of lawsuit subsequent is not uniform.

In this case, a Amsterdam justice authorised a fit to ensue on a drift that a Facebook information subjects in doubt reside in a Netherlands.

It also took a perspective that a internal Facebook corporate entity in a Netherlands is an investiture of Facebook Ireland, among other reasons for rejecting Facebook’s arguments.

How Facebook will find to press a box opposite a square of a Dutch remoteness lawsuit stays to be seen. It competence good have other procedural strategies adult a sleeve.

The tech hulk has used identical stalling plan opposite distant longer-running remoteness lawsuit in Austria, for example.

In that case, brought by remoteness supporter Max Schrems and his not-for-profit noyb, Facebook has sought to explain that a GDPR’s agree mandate do not request to a promotion business given it now includes “personalized advertising” in a TCs — and therefore has a “duty” to yield privacy-hostile ads to users — seeking to bypass a GDPR by claiming it contingency routine users’ information given it’s “necessary for a opening of a contract,” as noyb explains here.

A justice in Vienna supposed this “GDPR agree bypass” sleight of hand, traffic a blow to European remoteness campaigners.

But an interest reached a Austrian Supreme Court in Mar — and a mention could be done to Europe’s tip court.

If that happens it would afterwards be adult to a CJEU to import in either such a large loophole in a EU’s flagship information insurance horizon should unequivocally be authorised to stand. But that routine could still take over a year or longer.

In a brief term, a outcome is nonetheless some-more check for Europeans perplexing to practice their rights opposite height giants and their in-house armies of lawyers.

In a some-more certain growth for remoteness rights, a recent statute by a CJEU bolstered a box for information insurance agencies opposite a EU to move actions opposite tech giants if they see an obligatory hazard to users — and trust a lead administrator is unwell to act.

That statute could assistance unblock some GDPR coercion opposite a many absolute tech companies during a regulatory level, potentially shortening a blockages combined by bottlenecks such as Ireland.

Facebook’s EU to U.S. information flows are also now confronting a probability of a cessation sequence in a matter of months — associated to another square of lawsuit brought by Schrems that hinges on a dispute between EU elemental rights and U.S. notice law.

The CJEU weighed in on that final summer with a visualisation that requires regulators like Ireland to act when user information is during risk. (Germany’s sovereign information insurance commissioner, for instance, has warned supervision bodies to tighten their central Facebook pages forward of designed coercion movement during a start of subsequent year.)

So while Facebook has been spectacularly successful during kicking Europe’s remoteness rights claims down a road, for good over a decade, a plan of authorised check plan to defense a privacy-hostile business indication could finally strike a geopolitical section wall.

The tech hulk has sought to run opposite this hazard to a business by suggesting it competence switch off a use in Europe if a regulator follows by on a rough cessation sequence final year.

But it has also publicly denied it would indeed follow by and tighten use in Europe.

How competence Facebook indeed approve if systematic to cut off EU information flows? Schrems has argued it competence need to combine a use and store European users’ information inside a EU in sequence to approve with a eponymous Schrems II CJEU ruling.

Albeit, Facebook has positively shown itself skilful during exploiting a gaps between Europeans’ on-paper rights, inhabitant box law and a several EU and member state institutions concerned in slip and coercion as a tactic to urge a blurb priorities — personification opposite players and pulling agendas to serve a business interests. So either any singular square of EU remoteness lawsuit will infer to be a china bullet that army a reboot of a privacy-hostile business indication really many stays to be seen.

A maybe some-more expected unfolding is that any of these cases serve erodes user trust in Facebook’s services — shortening people’s ardour to use a apps and expanding opportunities for rights-respecting competitors to cook tradition by charity something better. 

Summer Sale: Save 10% on Extra Crunch membership

German supervision bodies urged to mislay their Facebook Pages before subsequent year

Max Schrems on a EU justice statute that could cut Facebook in two

Facebook’s EU-US information transfers face their final countdown


About the Author