Hundreds of millions of people who use Facebook and Instagram in the European Union now face a choice they never had to make before: hand over broad consent for their personal data to be combined and used for targeted advertising, or pay a monthly subscription fee to use the platforms without ads. The European Commission has formally ruled that this binary model, which Meta rolled out in November 2023, violates the Digital Markets Act (DMA). The decision puts Meta under direct regulatory pressure to change how it monetizes its largest platforms in Europe, and it raises a sharp question about whether free, privacy-respecting access to major social networks can survive the ad-funded business model.
How Meta’s pay-or-consent model triggered a DMA breach ruling
The conflict between Meta and European regulators has been building for more than two years. In November 2023, Meta began offering EU users of Facebook and Instagram a stark choice: accept the combination of personal data across Meta’s services for personalized advertising, or pay a monthly fee for an ad-free experience. No middle ground existed. Users who did not want their data pooled across platforms had to pay, and users who could not or would not pay had to accept full data sharing.
The European Commission sent preliminary findings to Meta on July 1, 2024, stating that this pay-or-consent structure appeared to breach the DMA because it failed to offer a free alternative with less intrusive data use. The Commission later formalized that position in a non-compliance decision finding Meta in breach of the act. The same announcement also found Apple in breach on separate grounds. For Meta, the ruling centered entirely on the absence of a genuine third path for users who want to keep using Facebook and Instagram without paying and without surrendering expansive data permissions.
Regulators framed the issue not as a ban on subscriptions, but as a rejection of what they saw as coercive consent. In their view, Meta’s model effectively told users that the only way to avoid intensive tracking was to start paying, even though the company had long provided the same core service for free and funded it through advertising. That shift, the Commission argued, undermined the DMA’s attempt to rebalance power between dominant platforms and individual users.
What the DMA actually requires and where Meta fell short
The Digital Markets Act, which applies to companies designated as gatekeepers in the EU, sets specific rules about how platforms collect and combine user data. Under the act, a gatekeeper cannot force users into an all-or-nothing consent arrangement. The law demands that users be able to access a version of the service that works without requiring them to agree to cross-platform data profiling. That version does not have to be identical in every feature, but it must be functionally equivalent.
Meta’s model failed this test because it offered only two lanes. The EU citizens Q&A for the DMA describes the core requirement in simple terms: users of gatekeeper platforms must be offered a less personalised but equivalent service that does not depend on tracking and combining their personal data across different services. Meta’s binary offer-either full consent to cross-service profiling or a paid, ad-free account-did not include any free option with reduced data collection.
That omission mattered because the DMA sits on top of the EU’s broader data protection framework. The Court of Justice of the European Union has previously held, in a landmark judgment involving a large social network, that consent to personalized advertising must be genuinely free and cannot be bundled with access to the core service. In that ruling, available in the official case law, the court stressed that dominant platforms must give users a real choice about how their data is used.
The Commission’s decision against Meta effectively translates that principle into DMA enforcement. The ruling does not ban subscription models outright. Platforms can still charge for premium features or ad-free experiences. But they cannot use a paywall as the only alternative to invasive data collection. The distinction sets a regulatory floor: EU users must have access to a free version of gatekeeper platforms that respects basic data-minimization principles, even if that version carries some form of advertising.
Whether Meta will build a data-minimized free tier
The most pressing open question is what Meta does next. One plausible response is the introduction of a third option: a free tier that serves ads based on limited or contextual data rather than the full cross-platform behavioral profile Meta currently assembles. Such a tier would aim to satisfy the DMA’s requirement for a less personalised but equivalent service. In practice, that could mean relying more heavily on signals such as the content of the page a user is viewing or broad, non-sensitive categories, while avoiding detailed tracking of activity across different Meta services.
Whether Meta actually builds this, and how quickly, will likely show up first in the company’s DMA compliance filings rather than in any public product announcement. The Commission maintains a compliance reports portal where updates from designated gatekeepers are tracked, and any structural change to Meta’s business model in Europe would be closely scrutinized there. The company also has to weigh engineering costs and potential knock-on effects on its global systems, which have long been optimized around highly personalized targeting.
No public data exists on how many EU users chose to pay versus how many accepted full data consent under the current model. That gap makes it difficult to assess the commercial stakes for Meta. If the vast majority of users simply clicked “consent” rather than paying, a new data-minimized free tier might not dramatically change Meta’s ad revenue in Europe, because advertisers would still reach most users with high levels of personalization. But if a meaningful share of users opted to pay, the company faces a harder calculation about cannibalizing subscription income with a free alternative.
There is also a competitive dimension. If Meta is required to offer a free, less intrusive option, other gatekeepers may face pressure-regulatory or market-driven-to match it. Smaller or non-gatekeeper services could try to differentiate themselves by promising stronger privacy protections without fees, positioning Meta’s eventual compromise as only a partial step toward user-friendly data practices.
What the ruling means for WhatsApp and other services
The ruling does not address WhatsApp directly. While public debate around Meta’s monthly fee sometimes lumps WhatsApp together with Facebook and Instagram, the Commission’s findings and the DMA citizens portal both focus specifically on the social networking and photo-sharing platforms. No equivalent enforcement action covering WhatsApp has been announced.
That distinction may reflect WhatsApp’s different business model and encryption-focused architecture. The service does not rely on the same kind of advertising-funded feed as Facebook or Instagram, and it uses end-to-end encryption for personal messages. Nonetheless, regulators have already shown interest in how data from messaging apps might be combined with data from other services owned by the same company. If the Commission concludes that cross-service profiling involving WhatsApp undermines user choice or entrenches gatekeeper power, similar scrutiny could follow.
For now, the immediate impact of the DMA decision falls squarely on Facebook and Instagram. Meta must propose a revised approach that offers EU users a genuinely free, data-minimized way to stay on its platforms. The company’s response will shape not only its own European business, but also the broader question of whether the era of “take it or leave it” data consent on dominant social networks is finally coming to an end.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
