Publication
Insurance regulation in Asia Pacific
Ten things to know about insurance regulation in 19 countries.
Germany | Publication | June 2020
Facebook’s extensive collection of user-related data must be put on hold in Germany for the time following a decision of Germany’s Federal Supreme Court on June 23, 2020. In summary proceedings, the Federal Supreme Court overturned an earlier order of the Higher Regional Court of Düsseldorf that – pending the outcome of an appeal by Facebook – had suspended the effect of a prohibition order issued by Germany’s Federal Cartel Office (FCO) in 2019 restricting Facebook’s collection of data. The FCO’s prohibition order will therefore be effective during Facebook’s ongoing appeal.
The case concerns the terms of use to which private users of Facebook must agree when logging in to the social network. The terms include consenting to Facebook’s use of personal data resulting from use of other services within Facebook’s group (e.g. WhatsApp and Instagram), as well as from accessing third-party websites (off-Facebook data).
After an investigation lasting approximately three years, the FCO issued a decision on February 6, 2019 prohibiting Facebook and other affiliated companies from both processing data provided for by Facebook's terms of use and implementing such processing, and imposed remedial measures (see our earlier briefing). The FCO found that making private use of the network dependent on the authorisation to link data relating to users and their devices generated outside facebook.com with personal data generated by use of Facebook itself without additional consent by users goes too far and amounts to an abuse of a dominant position by Facebook in breach of German competition law. In reaching this decision, the FCO concluded its investigation ahead of any decision by Ireland’s data protection authority, which has also opened proceedings against Facebook, inter alia to check whether such broad consent of users is permissible under data protection laws.
At Facebook’s request, the Higher Regional Court of Düsseldorf issued an order in August 2019 suspending the effect of the FCO’s decision pending Facebook’s appeal and due to serious doubts about the legality of the FCO’s decision (see our earlier video). The Higher Regional Court of Düsseldorf’s decision was then itself subject to review by Germany’s Federal Supreme Court – still in the interim proceedings – and, as mentioned, recently overruled on June 23.
The FCO based its finding of an abuse of a dominant position on a violation of legal provisions outside the realm of competition law, namely the General Data Protection Regulation (GDPR). “In future Facebook may no longer force its users to agree to a de-facto unlimited collection and allocation of non-Facebook data to their user account”, said the President of the FCO, Andreas Mundt, in early 2019 when justifying the prohibition order against the internet giant. Instead, users would have to actively agree to Facebook merging their data with information on other sites; the company must give users a choice.
Put simply, the rationale of the FCO’s decision was that a dominant company commits an abuse of its dominant position if it violates the GDPR.
By its decision of August 26, 2019, following an appeal by Facebook, the 1st Cartel Senate of the Higher Regional Court of Düsseldorf overturned the enforcement of the FCO’s decision in summary proceedings and ordered that the effect of the FCO’s decision be suspended. According to the Court, the drafting of terms of use did not constitute an abuse of a dominant position for several reasons: lack of causality, no damage to competition, and incorrect remedies. The Senate stated:
“The Office’s argument that the customer is uninformed because he does not read the terms of use […] is not valid in this context because […] the failure to inform is not due to the market power of Facebook, but, if appreciated in a realistic way, is most likely due to the indifference or convenience of the Facebook user […]”
According to the Düsseldorf Cartel Senate, this cannot be used to justify harm to Facebook users in the form of loss of control over their data.
The Federal Supreme Court’s Cartel Senate has now issued its own decision that seemingly leaves no doubt about Facebook’s dominant position in the social networking market or about the abuse of that position. It overturned the decision of the Higher Regional Court of Düsseldorf and rejected Facebook’s application for suspension of the effect of the FCO’s decision pending the outcome of its appeal.
It is interesting to note the reasoning of the Federal Supreme Court in its press release (No. 080/2020), which is the only reasoning of the Court published so far:
“[…] it is – unlike emphasised by the Bundeskartellamt [FCO] in the contested decision – not decisive whether processing and using personal Facebook user data generated based on their online behaviour outside facebook.com and irrespective of whether they are logged in to Facebook complies with the rules of the General Data Protection Regulation.”
The abuse of dominant position by Facebook must, therefore, be answered – and affirmed – independently of the question of whether Facebook’s terms of use violate the provisions of the GDPR.
According to the decision of the Federal Supreme Court, the decisive factor is, in fact. the following: the lack of choice for Facebook users to opt out of intensive personalization of their data when registering, which would enable users to restrict Facebook’s access to their data outside the use of Facebook, constituting an abuse of Facebook’s dominant position. After all, if there was effective competition, it would be expected that Facebook would respond to user desire to disclose less data by offering that option. Users would then be able to switch to disclosing less data if that was their preference.
Any impairment of competition is therefore not necessarily only on the market for social networks, but also cannot be ruled out in the neighbouring market for online advertising, which is highly important for Facebook from a financial perspective. Facebook’s access to a considerably larger database also reinforces the already pronounced "lock-in effects", so that there is no need to determine whether Facebook has a dominant position on that neighbouring market as well.
The Higher Regional Court of Düsseldorf has not yet decided on Facebook’s appeal in the main proceedings. However, it can be expected that the FCO will proceed with the enforcement of its decision and prohibition order in the meantime.
In the main proceedings, it might also be expected that the Düsseldorf Cartel Senate will be guided by the recent decision of the Federal Supreme Court in the summary proceedings, but this is by no means certain given the Cartel Senate’s recent judicial practice. An added complexity is the possibility that the main proceedings could also be referred to the Court of Justice of the European Union for guidance. Relevant data protection authorities will also have a decision to make – the decision of the Federal Supreme Court increasing the pressure on them to take action.
It therefore remains to be seen whether the FCO will emerge as the final winner of the main proceedings in this case. However, the recent decision of the Federal Supreme Court provides some evidence to suggest that this is the most likely outcome at this stage.
Publication
Ten things to know about insurance regulation in 19 countries.
Publication
A recent decision made by the UK's Advertising Standards Authority (ASA) brings into sharp relief the challenges for airlines to strike a balance between marketing their sustainability efforts in an understandable and compelling way, whilst avoiding criticism for “greenwashing”.
Publication
On November 28, 2023, the European Commission (EC) adopted its first list of Projects of Common Interest (PCIs), i.e., projects within the EU territory, and Projects of Mutual Interest (PMIs), i.e., projects connecting the EU with other countries, including 166 projects implementing the European Green Deal.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2025