We were right all along:
"EDPS (European Data Protection Supervisor) issues decision finding that the European Commission has illegally targeted advertisement on citizens using "sensitive" personal data on their political views."
https://noyb.eu/en/political-microtargeting-eu-commission-illegal
What now?
"The EDPS only issued a reprimand - so a formal finding that the processing was illegal and a formal warning. The EDPS considered that other measures, such as a fine, were not necessary as the Commission stopped the practise."
Too bad they don't have to also issue an apology or at least an admission of guilt, bit even not having to, they really should - it would be a first step in an attempt to recover lost credibility.