Just a few days ahead of the European Union's General Data Protection Regulation (GDPR) coming into effect, a Guardian investigation has found that Facebook lets advertisers to target users it thinks are interested in sensitive subjects such as homosexuality, Islam or liberalism.
Religion, sexuality and political beliefs are explicitly marked out as sensitive information under new data protection laws, said the report on Wednesday.
Facebook, according to the report, collects information about users based on their browsing habit and activities on the social network, and uses that information to predict on their interests and then categorise them based on inferred interests such as Islam or homosexuality.
Facebook is able to infer extremely personal information about users, which it allows advertisers to use for targeting purposes, found the Guardian investigation conducted in conjunction with the Danish Broadcasting Corporation.
Among the interests found in users' profiles were communism, social democrats, Hinduism and Christianity, it stated.
The GDPR which comes into effect on May 25 labels such categories of information as sensitive and mandates special conditions around how they can be collected and processed.
While Facebook, as part of its GDPR-focused updates, asked every user to confirm whether or not "political, religious, and relationship information" they had entered on the site should continue to be stored or displayed, it gathered no such consent for information it had inferred about users.
Facebook, however, said that classifying a user's interests was not the same as classifying their personal traits.
"Like other Internet companies, Facebook shows ads based on topics we think people might be interested in, but without using sensitive personal data," Facebook was quoted as saying
"Our advertising complies with relevant EU law and, like other companies, we are preparing for the GDPR to ensure we are compliant when it comes into force," it added.
Catch the latest from the Consumer Electronics Show on Gadgets 360, at our CES 2026 hub.