Meta, the parent company of Facebook and Instagram, has announced plans to use user data from its platforms for training its artificial intelligence (AI) systems starting May 27, 2025. However, this initiative has sparked significant backlash from consumer advocates, who argue that it violates European data protection laws.
On April 30, 2025, the Verbraucherzentrale Nordrhein-Westfalen (VZ NRW), a prominent consumer protection organization in Germany, issued a warning to Meta, demanding that the company cease its planned data usage. Christine Steffen, a data protection expert at VZ NRW, expressed deep concerns about the legality of Meta's approach, stating, "We have requested Meta to stop their plans for Instagram and Facebook in a warning on April 30, 2025."
Meta's announcement, made in mid-April, indicated that all content shared by European users on its platforms would be utilized to train AI systems. The company is relying on a legal basis of "legitimate interest," which allows them to proceed unless users actively opt-out. This means that unless users file an objection, their data—including posts, comments, photos, and interactions—will be included in the AI training process.
However, the VZ NRW argues that this blanket reference to legitimate interest does not satisfy the legal requirements set forth by the General Data Protection Regulation (GDPR). Steffen emphasized that users should not have to accept that their personal information, accumulated over years, is used for AI training without their explicit consent. She warned, "It is crucial that users act quickly, as data once used for AI training can hardly be removed from the systems again."
In its statement, Meta defended its plans, indicating that the training of its AI is essential for improving understanding and representation of German culture, language, and history. They stated, "This training is common in the industry and crucial for ensuring that our modern AI products and models increasingly better understand and reflect the nuances of German culture."
Despite Meta's reassurances, the VZ NRW has raised multiple legal concerns regarding the potential use of sensitive information, which is afforded special protection under GDPR. Steffen highlighted that the current opt-out procedure may not suffice, as individuals should actively consent to the use of such sensitive data.
In response to the looming threat of legal action, Meta warned that an interim injunction against its AI training could have dire consequences for innovation in Germany. They argued that such a move would hinder economic growth and the development of AI technologies that are locally relevant. Meta stated, "A possible injunction would be a significant setback for German consumers who desire locally relevant AI technology and for German companies that rely on AI models to understand local nuances."
The VZ NRW has made it clear that if Meta fails to comply with their demands, they will explore further legal actions. They have provided a detailed guide on their website to assist users in filing objections, which must be submitted before the May 27 deadline. The objection process requires users to provide an email address but does not necessitate a justification for their decision.
As the deadline approaches, consumer advocates are urging users to act quickly to protect their data. The implications of Meta's data usage extend beyond individual privacy concerns; they touch on broader issues of consent, data ownership, and the ethical use of personal information in AI training.
Meta's plans have ignited a broader conversation about the responsibilities of tech companies in handling user data, particularly in light of stringent European regulations. The outcome of this situation could set a significant precedent for how user data is treated in the era of AI.
As the landscape of artificial intelligence continues to evolve, the balance between innovation and privacy remains a contentious issue. With consumer advocates pushing back against what they see as overreach by tech giants, the future of data usage in AI training hangs in the balance.
In the face of these developments, users are reminded of their rights under GDPR and the importance of being proactive in safeguarding their personal information. The VZ NRW's efforts highlight the critical role of consumer protection organizations in holding companies accountable and ensuring that user consent remains at the forefront of data practices.
