Ireland’s Data Protection Commission has launched a formal investigation into Meta Platforms over allegations that the company uses automated profiling systems to generate personalised content and targeted advertisements on Facebook and Instagram without adequate user consent or transparency. The probe, initiated following a complaint, marks another significant regulatory challenge for the tech giant in Europe and raises critical questions about algorithmic decision-making practices that affect billions of users globally, including millions across South Asia.
The investigation centres on Meta’s deployment of what the regulator describes as “profiling” — the automated analysis of user behaviour, preferences, and data patterns to deliver customised content and ads. This practice has become fundamental to Meta’s business model, generating the vast majority of its €114.9 billion annual revenue. However, European regulators, particularly in the EU where the General Data Protection Regulation (GDPR) sets strict consent and transparency requirements, have increasingly scrutinised whether users genuinely understand and explicitly authorise such profiling.
The timing of this investigation underscores mounting pressure on Meta across multiple regulatory fronts. The company has faced previous fines and investigations in Europe — including a €1.2 billion GDPR penalty in 2021 for data transfer practices. This latest probe suggests regulators believe Meta’s profiling mechanisms may violate principles requiring explicit, informed consent before processing personal data for specific purposes. The technical sophistication of modern profiling systems, which often operate in ways opaque even to the companies deploying them, compounds the challenge of determining compliance with consumer protection laws.
Profiling systems analyse vast datasets including browsing history, purchase behaviour, location data, device information, and social interactions to construct detailed user profiles. These profiles enable Meta to predict user preferences with remarkable accuracy, allowing advertisers to target individuals at moments when they’re most likely to engage. For Indian users — numbering over 400 million across Meta’s platforms — this means their behaviour is continuously monitored and categorised to serve algorithmically-optimised content. The opacity of these systems has drawn criticism from digital rights advocates across South Asia, where awareness of data privacy rights remains nascent compared to Europe.
The investigation will likely scrutinise whether Meta provides users with granular, understandable information about profiling practices, and whether users can meaningfully opt out without losing core platform functionality. This distinction matters significantly: European law requires consent to be freely given, specific, informed, and unambiguous. If Meta conditions access to Facebook or Instagram on accepting profiling — offering no genuine alternative — regulators may deem such “consent” invalid. Indian tech analysts note that while India’s Digital Personal Data Protection Act lacks GDPR’s strictness, trends in European regulation typically foreshadow global expectations around data governance.
The broader implications extend beyond Meta to the entire attention economy model underpinning free social media platforms. If European regulators mandate stricter profiling controls, Meta would face significant operational and revenue challenges. The company might need to offer opt-out mechanisms that don’t penalise user experience, reduce data collection scope, or redesign its advertising model. Indian startups and homegrown platforms like ShareChat, which have built ad-targeting capabilities, should monitor this investigation closely as potential precedent for future Indian regulatory frameworks.
The investigation outcome will likely influence how regulators globally — including India’s upcoming amendments to data protection rules — approach algorithmic profiling. If the EU imposes substantial restrictions, Meta will face pressure to implement similar safeguards worldwide, reshaping how South Asian users’ data is processed. The next phase involves Meta submitting detailed information to Irish regulators about its profiling systems, technical architecture, and consent mechanisms. A formal decision could take months or years, but the investigation signals that automated profiling without transparent, specific consent faces an increasingly uncertain regulatory future in major markets.
