If they transparently inform buyers about the account requirement and what that means, then they have done their duty and are compliant, I'd say.

Not that I like that.

But as long as the consumer knows everything they need to know to make an informed decision about the product they're going to use, it's all good.

Now, this decision also needs to be voluntary, so if there are some dark patterns or other carefully constructed circumstances bullying the consumer into accepting all the bs, then that would violate the GDPR.

But what is voluntary or not is hard to say, for many products and services. Can be argued either way, and you better believe it will be argued either way.

I don't have an answer to your question, but I just wanted to say, I appreciate you still calling them Facebook and not Meta.

Also just to add: Using an Oculus Quest (at least without the "for business" variant) for work related use cases within EU poses risc for:

• business continuity when used with fake Meta accounts to have a kiosk mode and rotate devices among personnel
• GDPR because Meta doesnt sign proper DPA’s

It is. Thats also the reason why the quest is jot available in germany. (Or at least the quest 2)