A German appeals court has ordered Meta Platforms to pay damages to a Facebook user whose data was exposed in a massive scraping incident, finding the company violated European data protection rules through inadequate default privacy settings. The Frankfurt Higher Regional Court (OLG) ruled on April 8, 2025, that Meta failed to uphold the GDPR's principle of data minimization, leading to the user's loss of control over personal information.