On 28 April 2022, the Court of Justice of the European Union
("CJEU"), in delivering a ruling in the
case of Meta Platforms Ireland Ltd.
("Meta") vs Federation of German
Consumer Organisations e.V. ("VZBV")
(Case C-319/20), cleared the way for consumer protection
associations to pursue infringements of the General Data Protection
Regulation (Regulation (EU) 2016/679)
("GDPR"), irrespective of whether or not
it obtained the corresponding mandate from data subjects.
Background to the case and judicial proceedings before the
German Courts
Meta supplies free games from third parties, which are available
on a space called "App-Zentrum" on Facebook. When
accessing these games, the user is informed, by virtue of a notice,
that the use of the application allows the gaming company to:
