Germany’s competition authority ruled that Facebook cannot gather and combine personal data across platforms and websites unless users give permission, a decision that could have wide-ranging implications on the company’s ability to target advertising.

The company is also prohibited from combining information from users’ Facebook accounts with data from their accounts on Facebook-owned services like Instagram and What’s App without the users’ permission.

Related: Facebook wants you to have privacy, just not from Facebook