”Online platforms should offer users a genuine choice when using ‘consent or pay’ models. The current models often force individuals to either give up all their data or to pay. As a result, most users agree to the processing to access a service.” EDPB Chair Anu Talus.

The CJEU's decision in RW v. Österreichische Post AG centered on the interpretation of Article 15(1)(c) of the GDPR, which stipulates that data controllers must inform data subjects about the "recipients or categories of recipient" of their personal data.