Facebook has been ordered to curb its data collection practices in Germany after a ruling that the world’s largest social network abused its market dominance to gather information about users without their knowledge or consent.

Facebook said it would appeal the landmark ruling on Thursday by the Federal Cartel Office, the culmination of a three-year probe, saying the antitrust watchdog underestimated the competition it faced and undermined Europe-wide privacy rules that took effect last year.

“In future, Facebook will no longer be allowed to force its users to agree to the practically unrestricted collection and assigning of non-Facebook data to their Facebook accounts,” Cartel Office chief Andreas Mundt said.

The findings follow fierce global scrutiny of Facebook over a series of privacy lapses, including the leak of data on tens of millions of Facebook users, as well as the extensive use of targeted ads by foreign powers seeking to influence elections in the United States.

These have gone down badly with Germans, reflecting broader concerns over personal surveillance that dates back to Germany’s history of Nazi and Communist rule in the 20th century.

“Users are often unaware of this flow of data and cannot prevent it if they want to use the services,” Justice Minister Katarina Barley told Reuters, welcoming the ruling.

“We need to be rigorous in tackling the abuse of power that comes with data.”

The cartel office objected in particular to how Facebook pools data on people from third-party apps - including its own WhatsApp and Instagram services - and its online tracking of people who aren’t even members.

That includes tracking visitors to websites with an embedded Facebook ‘like’ or share button - and pages where it observes people even though there is no obvious sign the social network is present.

The ruling does not yet have legal force and Facebook has a month to appeal, which the social network said it would do.

“We disagree with their conclusions and intend to appeal so that people in Germany continue to benefit fully from all our services,” Facebook said in a blog post.

“The Bundeskartellamt underestimates the fierce competition we face in Germany, misinterprets our compliance with the GDPR, and threatens the mechanism European law provides for ensuring consistent data protection standards across the EU.”