s outlined in the section on advertising Facebook’s policy is that it does not allow the serving of ads based on the use of sensitive data as defined under EU law. In practice, however, it does seem that it is possible to use such information as contained in a profile. In this respect, it is not inappropriate for FB-I to claim legitimate interests for the processing of profile, interest and ‘like’ information entered by a user if it were considered that consent would not be a sufficiently robust basis for such processing. Regardless, there needs to be.
