Pinterest is facing accusations of violating the European Union’s General Data Protection Regulation (GDPR) following a complaint by privacy rights non-profit noyb. The complaint alleges that Pinterest failed to obtain proper consent from users before tracking them for advertising purposes.
In addition to the lack of consent for tracking ads, Pinterest is also accused of failing to comply with a GDPR data access request. According to noyb, the platform did not provide the complainant with adequate information about what categories of their data had been shared with third parties. This potential breach could result in significant penalties, as GDPR allows for fines of up to 4% of global annual turnover for confirmed violations.
The GDPR mandates that companies obtain a valid legal basis before processing users’ data and grants individuals in the EU specific rights, such as the ability to request copies of their information.