Meta unlawfully ignores the users' right to easily withdraw consent: complaint
Privacy advocates are challenging Meta’s “pay or consent” model in the EU, arguing that the company makes it far harder to withdraw tracking consent than to give it, in violation of GDPR rules that require withdrawal to be “as easy” as consent. Commenters debate whether paying for an ad-free tier meaningfully protects privacy, noting that many paid services still monetize user data and that network effects make opting out of major platforms difficult. There is broad support for stricter enforcement by data protection authorities and skepticism that current fines are sufficient to deter large tech firms from pushing the limits of the law.
Role of NOYB and Strategic Litigation
- Many commenters strongly support NOYB’s work and encourage donations, seeing it as unusually impactful for privacy enforcement.
- Discussion highlights how few individuals/organizations have the expertise, resources, and willingness to dedicate years to this kind of legal fight.
- NOYB is framed as systematically testing the boundaries of GDPR and dragging large companies and DPAs toward real compliance.
GDPR, Consent, and “Pay or Okay”
- Central issue: GDPR requires withdrawing consent to be “as easy as” giving it; Meta’s “pay or be tracked” model is argued to violate this by making opt‑out costly and convoluted.
- Some note many EU newspapers use similar models (pay or accept tracking), and at least some DPAs have started ruling such schemes illegal.
- There is debate whether a two‑tier all‑paid system (cheap with tracking, expensive without) could satisfy the “as easy” standard; several argue price asymmetry alone makes it fail.
Paying vs Being the Product
- Many argue paying does not stop data exploitation; paid services and devices still track and monetize user data.
- Others say preferring direct payment is still rational risk reduction, even if not a guarantee.
- Several emphasize the need for strong legal rights (privacy, deletion) instead of relying on payment models.
Enforcement and Fines
- Some call for maximum GDPR fines (up to 4% global revenue) due to Meta’s repeated, willful circumvention.
- The Irish DPA is criticized as under‑resourced and overly lenient, enabling “one‑stop shop” forum‑shopping by big tech.
- A few argue real deterrence may require personal consequences (e.g., for executives), not just corporate fines.
User Behavior, Network Effects, and Ethics
- Some users have quit Facebook/Instagram despite social costs (missed events, network effects).
- Others note for many jobs and social contexts, walking away is not realistically “free choice.”
- Meta’s practices are compared with pervasive tracking across the web (cookies, dark patterns, broken “settings”), making individual opt‑out strategies insufficient without systemic regulation.