Meta Platforms Ireland Limited – €17,000,000 Fine (Ireland, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Ireland's Data Protection Commission fined Meta 17 million euros for not having proper safeguards to protect user data. This fine was due to multiple data breaches reported in 2018. The decision highlights the importance of having strong data protection measures in place.
What happened
Meta was fined 17 million euros for failing to demonstrate adequate data protection measures after multiple data breaches.
Who was affected
EU users whose data was potentially exposed during the reported breaches.
What the authority found
The Irish Data Protection Commission found that Meta did not have proper technical and organizational measures to protect user data, violating GDPR requirements.
Why this matters
This case underscores the need for companies to implement robust data protection strategies. It also shows that authorities are serious about enforcing GDPR compliance, especially for large tech companies.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Irish DPA (DPC) has imposed a fine of EUR 17 million on Meta Platforms Ireland Limited (former Facebook Ireland Limited). The decision is based on twelve notifications of data breaches that occurred between June 7, 2018 and December 4, 2018. The outcome of the DPC's investigation revealed that Meta had violated Article 5 (2) GDPR and Article 24 (1) GDPR. In the course of its investigation, the DPC found that Meta failed to demonstrate that it had taken appropriate technical and organizational measures to protect the data of EU users. The fine proceedings involved cross-border data processing, which is why the decision was subject to the co-decision procedure under Art. 60 GDPR involving all other European supervisory authorities as co-decision-makers. Although two European DPAs objected to the DPC's draft decision, a consensus was ultimately reached. Accordingly, the DPC's decision reflects the collective views of the DPC and the other European DPAs.
Related Enforcement Actions (5)
Other enforcement actions involving Meta Platforms Ireland Limited in IE
Fine
€17.0M
Details
Fine Date
15 March 2022
Authority
Data Protection Commission
Fine Amount
€17,000,000
Enforcement Tracker ID
ETid-1094
About this data
Cite as: Cookie Fines. Meta Platforms Ireland Limited - Ireland (2022). Retrieved from cookiefines.eu
Last updated: