Enforcing jurisdiction
Ireland · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Meta Platforms Ireland Limited – €265,000,000 Fine (Ireland, 2022)

€265,000,000Data Protection Commission25 November 2022Ireland
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Meta Platforms Ireland Limited was fined EUR 265 million for a major data leak affecting millions of users. The leak involved personal data, including phone numbers and email addresses, being exposed on a hacking platform. This case serves as a warning to companies about the need for robust data protection practices.

What happened

Meta's data leak involved personal information of up to 533 million users being made available on a hacking platform.

Who was affected

Up to 533 million Facebook users whose personal data was leaked due to Meta's inadequate security measures.

What the authority found

The Irish DPA determined that Meta violated GDPR by failing to implement sufficient technical and organizational measures to protect personal data.

Why this matters

This significant fine illustrates that large tech companies can be held accountable for data breaches. It underscores the necessity for all businesses to enhance their data protection strategies.

Recorded legal citations
Automatically processed
Art. 25(1) GDPR
View original scraped data
Art. 25(1) GDPR
(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 4 March 2026.

Processing notes: date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Irish DPA has fined Meta Platforms Ireland Limited EUR 265 million. The DPA had launched an investigation against Meta in 2021 after media reports indicated that a dataset containing personal data from Facebook had been made available on a hacking platform. The data leak affected up to 533 million users with their data such as phone numbers and email addresses. As part of the investigation, the DPA reviewed and assessed the Facebook Search, Facebook Messenger Contact Importer and Instagram Contact Importer tools. The DPA primarily reviewed the implementation of technical and organizational measures to protect personal data and found a breach of Art. 25 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Meta Platforms Ireland Limited in IE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 November 2022

Authority

Data Protection Commission

Fine Amount

€265,000,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Meta Platforms Ireland Limited - Ireland (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: