The Irish Data Protection Commission has hit Facebook with a fine of €17m after finding they did not fully comply with GDPR. The decision followed an inquiry by the commission into 12 breach notifications it received in six months period between June and December 2018, examining their compliance with GDPR requirements for personal data processing at different points during this time frame.
The Data Protection Commission found that Meta Platforms failed to put in place adequate technical and organizational measures, which would make it easy for them to demonstrate the security precautions they implemented. This is despite having 12 personal data breaches.
According to The Irish data watchdog, Meta’s platforms had “failed to have in place appropriate technical and organizational measures” in the context of the 12 personal data breaches.
Ireland has a well-established tradition in regulating the tech industry, especially with regard to internet companies that have their European Union headquarters there.
References:
- https://www.bbc.com/news/articles/cp9yenpgjwzo#
- https://techcrunch.com/2022/03/15/facebook-2018-breaches-dpc-decision/
- https://www.rte.ie/news/business/2022/0315/1286598-facebook-fined-by-dpc/