EU Privacy Watchdog Urges Major Online Platforms to Offer Ad-Free Service Option

Apr 18, 2024 | News

Meta Platforms and other large online platforms should offer users the option to use their services for free without targeted advertising, the EU privacy watchdog said on Wednesday, responding to the company’s paid ad-free service that has triggered criticism.

The U.S. tech giant launched the no-ads subscription service for Facebook and Instagram in Europe last November, saying users who consent to be tracked get a free service which is funded by advertising revenues.

Privacy activists and consumer groups say such practices could encourage other companies to follow suit. National privacy regulators in the Netherlands, Norway and Germany subsequently asked the European Data Protection Board (EDPB) for an opinion on the validity of such consent.

“If controllers do opt to charge a fee for access to the ‘equivalent alternative’, they should give significant consideration to offering an additional alternative. This free alternative should be without behavioural advertising,” EDPB said in a statement.

It said one example could be a form of advertising where less or no personal data is involved.

The watchdog said a third option was important as most users do not fully understand the implications of their choices when asked to choose between paying for an ad-free service or agreeing to be tracked in return for a free service funded by advertising revenues.

It said companies offering just a binary choice to users may fall foul of requirements for valid consent under EU privacy rules.

The U.S. tech giant earlier on Wednesday referred to its previous blogs which said that ‘subscription for no ads’ conforms to a European Union court ruling backing such models as a way for people to consent to data processing for targeted advertising.

“We welcome that the EDPB has started a more nuanced discussion on ‘pay or okay’ and at least clarified that large platforms cannot use ‘pay or okay’,” advocacy group NOYB’s chairman Max Schrems said in a statement referring to the choice of either paying for privacy or consenting to data collection.

Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

October 30, 2026 | ITBriefcase.net Story 1: Oracle E-Business Suite CVE-2026-101767 (CVSS 9.8) — Unauthenticated SQLi-to-RCE Actively Exploited in the Wild Impact: HIGH CVE: CVE-2026-101767 CVSS: 9.8 (CVSSv3.1) Product: Oracle E-Business Suite (EBS) — TCF servlet...

read more
Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more