“Our election tools have been expressly designed to respect users’ privacy and comply with the GDPR. While we disagree with the AEPD’s assessment in this case, we have cooperated with their request,” a Meta spokesperson told Reuters.
According to the agency, Meta has said it intends that all eligible Instagram and Facebook users in the European Union will receive notifications from VIU and EDI reminding them to vote.
“The data processing envisaged by Meta would be contrary to Spanish data protection regulation and would, at the very least, breach the data protection principles of lawfulness, data minimisation and limitation of the retention period,” the AEPD said in a statement.
It added that Meta was selecting eligible voters based on the data contained in users’ profiles about their city of residence, as well as their IP addresses. But the only condition to be allowed to vote in the European election is being an adult national of any of the EU’s member states.
The AEPD said this data treatment was “unnecessary, disproportionate and excessive” because it left out EU citizens living abroad and targeted citizens of non-EU countries who are in Europe.
The agency added that collecting data on users’ ages was not justified, as there was no reliable mechanism to verify their self-reported ages, and the treatment of interaction data was “totally disproportionate in relation to the supposed purpose of informing about the elections”.
The watchdog said Meta had not justified the need for storing the data after the election, which “reveals an additional purpose for the processing operation”.
(Reporting by David Latona; Editing by Inti Landauro and Giles Elgood)
Disclaimer: This report is auto generated from the Reuters news service. ThePrint holds no responsibilty for its content.