De Europese Toezichthouder voor Gegevensbescherming (EDPB) zal binnenkort beslissen over de toekomst van vrije toestemming online. Na de introductie van een "Betalen of Accepteren" systeem door Meta vorig jaar, zal de EDPB een bindend advies uitbrengen. Mocht de aanpak voor Meta worden gelegitimeerd, dan zouden bedrijven uit alle sectoren het voorbeeld van de socialemediagigant kunnen volgen. Dit zou uiteindelijk kunnen leiden tot de uitholling van vrije toestemming online. Maar hoe is de huidige situatie in de lidstaten? noyb verzamelde gegevens over de huidige implementatie van de "Betalen of Accepteren" benadering in geselecteerde lidstaten. In sommige daarvan is het beschermen van je privacy al extreem duur geworden. De blog gaat verder in het Engels.
Open letter by 28 organisations to the EDPB (1)
Free consent is at risk. After the European Court of Justice (CJEU) declared Meta’s handling of user data illegal (2) in July 2023, Meta switched to a “Pay or Okay” system to once again bypass the GDPR. Instead of asking its users for yes/no consent, the company charges them a fee for refusing its invasive tracking for personalised ads. This system could now spread across the whole internet, putting free consent at risk for millions of Europeans.
1,500 € to protect your privacy online? But where could this lead? While in some countries, “Pay or Okay” doesn’t seem to be a huge issue yet, others show clearly what the future could hold. Less than a year after the German authorities legitimised the practice (3), 30% of the top 100 websites in Germany are already using “Pay or Okay” to drive up consent rates. Using these websites without tracking for personalised ads would already cost more than 1,500 € per year. In Spain, users would face costs of about 1,460 €, while in France the price for privacy already exceeds 1,100 €.
Just the beginning. These are just a few examples that clearly illustrate the problem with “Pay or Okay”. If the EDPB legitimises the approach for Meta, more and more companies will follow the example and switch to “Pay or Okay”, rendering the fundamental right to privacy virtually useless. Even now, the price for privacy would break the budget of most people. And it will only get worse in the future, at least if the EDPB and the national DPAs don’t take a clear stance against “Pay or Okay”.
A lower price doesn't lead to compliance. Meta's recent announcement (4) that it will lower the price for its paid subscription doesn't change this fact. The GDPR clearly states that consent must be "freely" given. Meta, on the other hand, is hiding the "refuse" button behind a paywall. Scientific studies clearly illustrate that this leaves many people without a choice: For example, the CEO of the “Pay or Okay” provider contentpass (5) stated that 99.9 % of visitors agree to tracking when faced with a € 1.99 fee. At the same time, objective surveys suggest (6) that only 3-10 % of users want their personal data to be used for targeted advertising. In other words: It's not about the price, but the "Pay or Okay" system as a whole.
(1) https://noyb.eu/sites/default/files/2024-02/Pay-or-okay_edpb-letter_v2.pdf
(2) https://noyb.eu/en/cjeu-declares-metafacebooks-gdpr-approach-largely-illegal
(3) https://www.datenschutzkonferenz-online.de/media/pm/DSK_Beschluss_Bewertung_von_Pur-Abo-Modellen_auf_Websites.pdf
(4) https://www.reuters.com/technology/meta-offers-cut-facebook-instagram-monthly-fees-599-euros-2024-03-19/
(5) https://arxiv.org/pdf/2309.11625.pdf
(6) https://noyb.eu/sites/default/files/2020-05/Gallup_Facebook_DE.pdf
