What happened
On October 22, 2024, noyb (European Center for Digital Rights) filed a complaint with France’s data protection authority (CNIL) against Pinterest for failing to obtain user consent for personalized advertising.
The complaint alleges that Pinterest tracks users by default, using their personal data for ads without explicit consent, claiming “legitimate interest” under Article 6(1)(f) GDPR. This approach directly opposes a 2023 CJEU ruling that prohibits basing personalized ads on legitimate interest without consent.
noyb’s investigation found that Pinterest’s default “ads personalization” setting uses on-site activity and third-party information for targeted ads.
Additionally, Pinterest allegedly failed to fulfill a user’s data access request under Article 15(1)(c) GDPR, not providing details on the third parties who received user data.
noyb has requested that CNIL enforce compliance, require deletion of unlawfully processed data, notify recipients of the erasure, and impose fines to prevent future violations.
What happened On October 22, 2024, noyb (European Center for Digital Rights) filed a complaint with France’s data protection authority (CNIL) against Pinterest for failing to obtain user consent for personalized advertising. The complaint alleges that Pinterest tracks users by default, using their personal data for ads without explicit consent, claiming “legitimate interest” under Article […]