Noyb challenges Meta's new opt-out policy for AI training

In the European Union, a significant challenge to Meta's AI training practices has emerged from the privacy advocacy group Noyb. On May 14, 2025, Noyb sent Meta a cease-and-desist letter concerning its AI training processes, claiming that users who opted out in 2024 are being coerced into opting out again, or risk their data being used in AI models. This controversial directive comes just before the expiry date of May 27, 2025, by which EU users are notified to opt out of their public posts being included in AI training data. Noyb argues that this approach contradicts earlier promises made by Meta and undermines user trust. Noyb's stance reflects broader concerns regarding data privacy and the application of the General Data Protection Regulation (GDPR). The organization also referred to previous arguments made by Meta where it claimed a 'legitimate interest' in using data for AI training. However, Noyb contests this assertion, stating that Meta’s broad data collection practices lack genuine consent from users, fundamentally challenging the legal grounds on which Meta operates. The group's chairman, Max Schrems, emphasized that using personal data without clear consent undermines the rights of individuals, as established by GDPR rules. Parallel to this, Meta has reiterated its compliance with EU regulations, arguing that their AI training methods are transparent compared to those of competitors like Google and OpenAI. The company has claimed to have engaged with the Irish Data Protection Commission to ensure their policies align with legal requirements. Nevertheless, Noyb points out that most national Data Protection Authorities have not provided explicit approval for Meta's AI training practices, leading to claims of regulatory overreach by the company. The contention between Noyb and Meta thus represents a critical juncture in the ongoing debate over data protection rights versus technological advancement. While Meta positions itself as innovating for better services for European users, the regulator's responses question whether these developments truly respect user consent and privacy rights. The continuation of this battle will undoubtedly shape the landscape of data privacy and AI training within the EU, and may potentially set precedents for how tech companies handle user data in the future.