Meta Platforms, Inc.

€405,000,000

Non-compliance with general data processing principles

Fecha de la decisión

5 de septiembre de 2022

Autoridad

Data Protection Authority of Ireland

IE

Sector

Media, Telecoms and Broadcasting

País

IE

Ley

GDPR

Estado

FINAL

Descripción

The Irish DPA (DPC) has imposed a fine of EUR 405,000,000 on Meta Platforms, Inc. (Instagram). Following the investigation, the DPC submitted a draft decision under Art. 60 GDPR to other European supervisory authorities concerned. The initial draft proposed a fine of EUR 30-50 million. The DPC subsequently received objections from six supervisory authorities, which led to a dispute resolution procedure at the European Data Protection Board (EDPB) in Brussels. In its decision, the EDPB requested the DPC to increase the proposed fine. The DPC's investigation revealed that on Instagram business accounts of minors, their cell phone numbers and email addresses were publicly displayed. In addition, the settings for the underage users' accounts were set to 'public' by default , making their social media content publicly viewable unless they changed the account settings. The breach potentially affects millions of teenagers.

Citas legales

Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 24Art. 25 (1)Art. 35

Problemas e infracciones

Non-compliance with general data processing principles

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.