A German consumer rights group said on Monday that a court had found Facebook's use of personal data to be illegal because the US social media platform did not adequately secure the informed consent of its users.
The Vzbv consumer group successfully argued that five of the app's services were switched on by default, with the relevant privacy settings "hidden".
The court dismissed a number of other allegations against Facebook as part of the same trial and the defendant is now planning to appeal the sentence deeming its privacy practices illegal.
The Vzbv group reported Monday that its case against Facebook - which was initially brought in 2015 - had been partially successful.
The court agreed that Facebook had not done enough to alert people to the fact that it had pre-ticked several privacy settings.
Julia Louis-Dreyfus 'ready to rock' after breast-cancer surgery
"Hoorah!", Louis-Dreyfus posted on her Instagram page today. "Hoorah! Great doctors, great results", she wrote . The Veep actress revealed she had breast cancer in September.
Rockford Better Business Bureau warns of romance scam
Also, run their profile picture through a search engine like Google - that way, you can see if it pops up on other sites. Be safe in your search for love, look out for your friends and family, and if it sounds too good to be true, be wary.
Serena Williams again on court docket after being pregnant
But she hinted on Sunday she could make herself available for selection for the US' next round clash in France in April. The tennis icon added that this past weekend's competition was "the start of a long process" in returning to the top.
Facebook intends to appeal, but believes that planned changes to the app will ensure it obeys the law.
While the ruling was handed down in the middle of last month, the court's judgement has only been made public today.
"Facebook hides data protection-unfriendly presets in its privacy center, without sufficiently informing it during registration", says Heiko Dünkel, Legal Officer at vzbv. Amongst the offending clauses are those that give Facebook the right to transmit data to the USA and use personal data for commercial purposes. "That is not sufficient for informed consent".
Search engines get a link to the participants' activity history by default, making it easy for anybody online to stumble across things like profiles and account photos. However, although the judges ruled the clause inadmissible, they said it remained unclear whether it is acceptable for Facebook to have a real-names policy as such.
GDPR will require all companies, both within the European Union and those dealing with European Union citizens, to be clear and explicit in their data collection policies, meaning that pre-ticked or woolly consent boxes will no longer be adequate for obtaining permission to use someone's information.
Under German law, personal information can only be recorded and used by a company with explicit agreement from the individual.