Facebook on privacy - consent or contract
Very interesting playbook by Facebook on privacy - consent or contract. Fortune explains: "Before the GDPR was introduced in 2018, Facebook said its users were “consenting” to having their data used for personalized ad-targeting. But the new law introduced stricter standards for what “consent” means and implies—people can withdraw their consent at any time—so Facebook switched to saying the consent clauses in its user agreements are instead contracts in which its users order personalized advertising. Under the GDPR, personal data can be processed if doing so is necessary for fulfilling a contract. However, the conditions for using this reason are pretty narrow. The EU’s privacy regulators have advised that the “contractual” basis for processing is fair enough if, for example, an online retailer needs to process billing addresses for payment purposes—but not if they want to profile their users’ tastes, because that isn’t strictly necessary for executing the sale."