The EDPB adopted three dispute resolution decisions based on Art. 65 GDPR concerning Meta Platforms Ireland Limited (Meta IE). The binding decisions address important legal issues arising from the draft decisions of the Irish SA as a lead supervisory authority (LSA) regarding Meta IE platforms Facebook, Instagram, and WhatsApp. The EDPB binding decisions play a key role in ensuring the correct and consistent application of the GDPR by the National Supervisory Authorities.

The Irish SA issued the draft decisions following complaint-based inquiries into the processing activities of the three platforms. The Facebook and Instagram draft decisions concern, in particular, the lawfulness and transparency of processing for behavioral advertising. The WhatsApp draft decision concerns notably the lawfulness of processing for the improvement of services. Several SAs issued objections to the draft decisions prepared by the Irish SA concerning, among others, the legal basis for processing (Art. 6 GDPR), data protection principles (Art. 5 GDPR), and the use of corrective measures including fines.

As no consensus was reached on these objections, the EDPB was called upon to settle the dispute between the SAs within two months.

In its binding decisions, the EDPB settles, among others, the question of whether or not the processing of personal data for the performance of a contract is a suitable legal basis for behavioral advertising, in the cases of Facebook and Instagram, and for service improvement, in the case of WhatsApp.

The LSA shall adopt its three final decisions, addressed to the controller, based on the EDPB binding decisions, taking into account the EDPB’s legal assessment, at the latest one month after the EDPB has notified its decisions. The EDPB will publish its decisions on its website after the LSA has notified its national decisions to the controller.

Source; https://edpb.europa.eu/news/news/2022/edpb-adopts-art-65-dispute-resolution-binding-decisions-regarding-facebook-instagram_en