The RGPD enshrines fundamental rights with regard to the protection of personal data, in particular, the right of access to data, the right of rectification, the right of erasure and the right of opposition, as well as the right to restrict processing. The right to object to the use of data must be expressly declared. Without such opposition, the rule is that the data will be used, in direct violation of the principle of explicit consent laid down in general data protection regulations.
Discussions between the CNIL, the Irish authority (the Data Protection Commission, competent to judge Meta, whose European headquarters are based in Ireland) and their European counterparts are nevertheless underway to evaluate this system. The question is: is the right to data protection really respected when the rules applied by Meta are so complex? Verifying the compliance of the policies adopted by Meta with the RGPD and French law is not a simple task, because this is a company whose activities have repercussions in several countries. It is therefore necessary to analyze (I) Meta's privacy policy, which depends on the products or services used, and (II) European and French rules on the protection of personal data.
