The European Commission (EC) faced a scathing rebuke from the European Data Protection Supervisor (EDPS) after being found guilty of illegally using citizens’ sensitive personal data for targeted advertisements tied to their political views.
The ruling concluded that the EC violated privacy laws during a controversial ad campaign run on X (formerly Twitter) in September 2023.
The ads, part of an awareness push for the EC’s proposed legislation to combat online child sexual abuse material (CSAM), were slammed for micro-targeting users based on political leanings and religious beliefs. Reports revealed the EC specifically excluded users interested in topics like Brexit, Marine Le Pen, and Alternative für Deutschland (AfD), while attempting to sway Dutch citizens during a contentious legislative debate. The privacy watchdog noyb labeled this move a desperate attempt to manipulate public opinion and undermine democratic processes.
The EDPS reprimanded the EC, emphasizing the unlawful nature of the data use but stopped short of imposing a fine or ban due to limitations in the EU’s legal framework. A noyb spokesperson said the decision “sends a strong message,” urging national authorities to crack down on such practices, which are alarmingly common in election campaigns.
Critics pointed out the EC’s hypocrisy, highlighting its previous warnings against micro-targeting as a threat to democracy. Meanwhile, noyb’s data protection lawyer Maartje de Graaf called out both the EC and X for disregarding their own rules, stating, “It’s mind-boggling that the EU Commission doesn’t follow the law it helped create.”
This scandal comes amid rising concerns over digital election interference, with recent allegations of similar tactics disrupting Romania’s presidential elections. As public trust in EU institutions continues to erode, the Commission’s actions have sparked outrage and raised serious questions about its commitment to fair and democratic processes.