Norway has succeeded in getting the European Data Protection Board (EDPB) to make permanent and extend across Europe its ban on Meta (Facebook’s parent company) harvesting user data for targeted ads on Facebook and Instagram.
Meta’s practices also collected protected data like race, religion, and sexual orientation. Meta disputed that it needed explicit consent, arguing that agreeing to terms of service was enough, but courts rejected this.
Oh please let this be the beginning of a global backlash against corporate EULA’s and the start of a path towards a few well understood EULA’s, similar to how we have a few well understood FOSS licenses.