Pinterest Accused of Breaking GDPR
When it comes to privacy nightmares, Pinterest is unlikely to be the first social app that springs to mind. But the visual discovery engine’s use of tracking ads is the target of the latest complaint from European privacy rights non-profit noyb, which accuses it of breaching the bloc’s General Data Protection Regulation (GDPR) by failing to obtain consent from users to being tracked and profiled for advertising.
The GDPR allows for penalties of up to 4% of global annual turnover for confirmed breaches so such complaints can lead to substantial sanctions for tech giants.
While Pinterest has generally flown under the radar, with regard to online privacy issues — especially compared to other mainstream ad-funded social services (such as Facebook) — it’s worth recalling that the company’s tracking and profiling was pulled center stage in the tragic case of the suicide in 2017 of the U.K. schoolgirl, Molly Russell. She had pro-suicide content pushed into her social feeds by a number of apps, including Pinterest.
A 2022 ‘Prevention of Future Deaths’ report by a U.K. coroner found that “negative effects of online content” were a factor in her death. It was the result of the ad-funded platforms’ pervasive tracking and profiling of users.
Pinterest Accused of Breaking GDPR by Tracking Users Without Consent
When it comes to privacy nightmares, Pinterest is unlikely to be the first social app that springs to mind. But the visual discovery engine’s use of tracking ads is the target of the latest complaint from European privacy rights non-profit noyb, which accuses it of breaching the bloc’s General Data Protection Regulation (GDPR) by failing to obtain consent from users to being tracked and profiled for advertising.
The GDPR allows for penalties of up to 4% of global annual turnover for confirmed breaches so such complaints can lead to substantial sanctions for tech giants.
While Pinterest has generally flown under the radar, with regard to online privacy issues — especially compared to other mainstream ad-funded social services (such as Facebook) — it’s worth recalling that the company’s tracking and profiling was pulled center stage in the tragic case of the suicide in 2017 of the U.K. schoolgirl, Molly Russell. She had pro-suicide content pushed into her social feeds by a number of apps, including Pinterest.
A 2022 ‘Prevention of Future Deaths’ report by a U.K. coroner found that “negative effects of online content” were a factor in her death. It was the result of the ad-funded platforms’ pervasive tracking and profiling of users.
In the noyb-backed complaint against Pinterest, which has been filed with France’s data protection authority, the platform is also accused of failing to fulfill a GDPR data access request. It didn’t provide information on the categories of data about the complainant that were shared with third parties.
As well as requiring that companies have a valid legal basis to process people’s data, the GDPR provides individuals in the EU with a suite of access rights, such as the ability to request a copy of their information.
Secret Tracking
Pinterest is relying upon a legal basis for processing people’s data for ad targeting that’s known as legitimate interest (LI). However, noyb argues this use is non-compliant with the GDPR.
As it stands, Pinterest, which has some 130 million regional users, tracks all of them by default to “personalize” ads.
Any Pinterest user in Europe who wishes not to be tracked and profiled in this way must take the active step of objecting to its processing (the GDPR requires that users are provided with the ability to object to processing if LI is the legal basis), rather than being affirmatively asked whether they’re okay with their information being used like this, as noyb believes should be the case here.
“Pinterest is secretly tracking European users without asking for their consent,” said Kleanthi Sardeli, a data protection lawyer at noyb, in a statement on the complaint. “This allows the social media platform to unlawfully profit from people’s personal data without them ever finding out.”
“It appears that Pinterest is actively ignoring a European Court of Justice (CJEU) ruling in order to maximise its profits. The CJEU made it clear that personalised advertising cannot be based on legitimate interest,” Sardeli added.
Data Access Issue
noyb’s complaint against Pinterest has been filed on behalf of an unnamed user who it said had not realized the platform was tracking her without consent.
She only discovered Pinterest’s tracking when she looked at the “privacy and data” settings — where she found that “ads personalization” was turned on by default. She also found that the platform uses information from “visited websites” and other third parties for ads display, as well as tracking her on-site activity for this purpose. In short, Pinterest is in the surveillance ads business.
“This practice is clearly unlawful since the introduction of the GDPR in 2018,” noyb wrote in a press release. “In its ruling in case C252/21 Bundeskartellamt in 2023, the Court of Justice of the European Union (CJEU) found again that personalised advertising cannot be based on legitimate interest under Article 6(1)(f) GDPR.”
The complainant also took the step of filing a data access request to Pinterest. But the copy of her data she received didn’t include any information about the recipients of her data, per noyb.
“Even after two additional requests, Pinterest failed to provide details about the categories of data that were shared with third parties,” it wrote, adding: “In other words: Pinterest failed to adequately respond to the access request under Article 15(1)(c) GDPR.”
The complaint calls for Pinterest to delete any data it has processed for ads and inform users it has done so. The company should also fulfil the complainant’s data access request. Additionally, noyb is pressing for it to be fined at a level that would act as a deterrent for future GDPR breaches.
Pinterest has been contacted for a response to the complaint.
While noyb has filed this case in France, where the regulator (CNIL) has a strong reputation for enforcing on privacy complaints — including around the issue of consent — it’s possible it could be passed to Ireland’s Data Protection Commission on account of Pinterest having its regional HQ in Dublin. (And because of the GDPR’s “one-stop-shop” mechanism for streamlining oversight of complaints that span EU borders.)
However, noyb told TechCrunch it has filed the complaint against Pinterest’s U.S.-based entity, pointing out that the company’s privacy policy names both Pinterest Europe and Pinterest, Inc (i.e. the US entity) as joint data controllers for the processing.
“The CNIL therefore is the competent authority and shouldn’t forward the complaint to Ireland,” it suggested. “But we of course don’t know if they will do so anyway.”
Summary
- Pinterest is accused of violating the GDPR by tracking users for advertising without consent.
- noyb filed a complaint with the French data protection authority.
- The complaint alleges that Pinterest fails to provide data access information as requested.
- Pinterest claims legitimate interest as the legal basis for data processing but noyb argues it is non-compliant with GDPR.
- noyb accuses Pinterest of ignoring a European Court of Justice ruling regarding personalized advertising.
- noyb wants Pinterest to delete data processed for ads, fulfill the complainant’s data access request and face fines for GDPR violations.
Review
Kalpesh Shewale
I am grateful to have completed my Full Stack Development with AI course at Apnaguru. The faculty's support and interactive classes helped me discover my potential and shape a positive future. Their guidance led to my successful placement, and I highly recommend this institute.
Kalpesh Shewale
I am grateful to have completed the Full Stack Development with AI course at Apnaguru. The faculty's dedicated support and hands-on approach during the classes enabled me to unlock my potential and shape a promising future. Their guidance helped me secure a placement with a good package. I highly recommend this course, and for those interested, I also suggest doing the offline version at the center for an enhanced learning experience.
Raveesh Rajput
Completing the Full Stack Development with AI course at Apnaguru was a game-changer for me. I secured an internship through this course, which gave me invaluable hands-on experience. I strongly recommend this course to anyone looking to break into the tech industry. For the best experience, I suggest attending the offline sessions at the center, where the interactive learning environment really enhances the overall experience.
swapnil shinde
Apnaguru’s Full Stack Development with AI course provided me with more than just knowledge—it opened doors to an internship that gave me real-world, hands-on experience. If you're serious about a career in tech, this course is a must. I highly recommend attending the offline sessions for the most immersive and interactive learning experience!
Kalpana Waghmare
I recently completed the Full Stack Developer with AI course on ApnaGuru, and I couldn’t be more impressed! The structure of the course, with well-organized topics and self-assessment MCQs after each section, really helped reinforce my learning. The assignments were particularly valuable, allowing me to apply what I learned in a practical way. Overall, it’s an excellent program that effectively combines full-stack development and AI concepts. Highly recommended for anyone looking to enhance their skills!
Completing the Full Stack Development with AI course at Apnaguru was a pivotal moment in my career. It not only deepened my understanding of cutting-edge technologies but also directly led to an internship that provided practical, real-world experience. If you're aiming to enter the tech field, this course is an excellent stepping stone. I especially recommend attending the in-person sessions at the center, where the dynamic, hands-on learning approach truly maximizes the benefits of the program.
Mahesh Bhosle
I completed the Full Stack Development course at Apnaguru, and it was a valuable experience. The focus on live assignments and projects gave me real-world insights, helping me apply my skills in a professional setting. The interactive live sessions, mock interviews, and question banks were excellent for job preparation. Apnaguru’s company-like environment also helped me get accustomed to real work dynamics. Overall, this course equipped me with the skills and confidence needed for a career in full-stack development. I highly recommend it to anyone seeking hands-on learning and industry relevance.
I recently completed the Full Stack course at ApnaGuru, and I’m genuinely impressed! The curriculum is well-structured, covering both front-end and back-end technologies comprehensively. The instructors are knowledgeable and provide hands-on experience through practical projects. The supportive community and resources available made learning enjoyable and engaging. Overall, it’s a great choice for anyone looking to kickstart a career in web development. Highly recommend!
Adarsh Ovhal
I recently participated in the Full Stack Development With AI Course program, and it has been incredibly beneficial. The guidance I received was tailored to my individual needs, thanks to their advanced use of AI tools. The Trainers were knowledgeable and supportive, helping me explore various educational and career paths. The resources and workshops provided were practical and insightful, making my decision-making process much clearer. Overall, I highly recommend this program to any student looking for IT Field and personalized career guidance!
Shirish Panchal
I’m currently pursuing the Full Stack Developer with AI course at ApnaGuru Training Center, and I'm impressed with what I've experienced so far. The curriculum is well-structured, covering key concepts in both front-end and back-end development, along with AI fundamentals. The instructors are knowledgeable and supportive, which makes it easy to engage and ask questions. I particularly appreciate the hands-on projects that help reinforce what I’m learning. While I’m still in the process of completing the course, I feel that I'm building a strong foundation for my future in tech. I would recommend ApnaGuru to anyone looking to explore full stack development with AI!
Apnaguru Training Center stands out as a top-notch institute for IT education. They provide a wide array of courses, including Full Stack Development, Java Full Stack, Python, Automation Testing, DevOps, and MERN/MEAN Stack, all designed to meet the demands of the modern tech industry.
Mahesh Bhosle
Apnaguru Training Center is a fantastic place for IT education! They offer a variety of courses, including Full Stack Development, Java Full Stack, and Python, all taught by knowledgeable instructors who are committed to student success. The curriculum is up-to-date and includes hands-on projects that enhance learning.
dandewar srikanth
I had an excellent experience with the full-stack web development program at APNAGURU. The instructor had in-depth knowledge of both frontend and backend technologies, which made the concepts easy to grasp. From working on HTML, CSS, JavaScript, and React for the frontend to Node.js and MongoDB for the backend, the learning curve was very smooth.