United Kingdom: Information Commissioner's Office issued statement on lawsuit challenging personal data processing by Meta for direct marketing

On 22 March 2025, the UK Information Commissioner's Office (ICO) issued a statement on the O’Carroll v Meta case. The lawsuit alleged that the company unlawfully processed personal data for direct marketing purposes. Under Article 21 of the United Kingdom's General Data Protection Regulation, Meta was required to cease the processing immediately upon receiving the objection to processing but failed to comply. The claimant also requested an order compelling Meta to stop using personal data for direct marketing and related profiling. The ICO reaffirmed that online targeted advertising qualifies as direct marketing and that individuals have the right to object to their personal data being used for such purposes. The statement applies to online platforms engaging in targeted advertising, requiring them to provide a clear opt-out mechanism and respect users' choices. The ICO encouraged individuals to file complaints if their requests to stop data processing are not honoured.