Record fine for Facebook for transferring personal data to the U.S.
On May 12, 2023, the Irish Data Protection Commission closed its investigation into Meta Platforms Ireland with a historic fine of €1.2 billion. With regard to the availability of the Facebook platform, Meta Ireland transfers personal data from the EU/EWR to the USA without ensuring adequate protection of the fundamental rights and freedoms of the data subjects. The risks of transferring data to the USA were confirmed by the earlier ruling of the European Court of Justice against Facebook Ireland Limited. As part of a joint process, the draft decision of the Data Protection Committee was submitted to the other EU/EWR supervisory authorities. Some authorities have demanded fines, but no agreement could be reached. The final decision was then made by the European Data Protection Board.
Meta Ireland has been ordered to cease any future transfers of personal data to the United States and must further cease processing, including storage, of data already transferred to the United States within six months.
Entscheidungsdatum:
12.05.2023
Land:
Ireland
Art des Verstoßes:
Illegal data processing
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
Yes
verhängte Geldstrafe:
€ 1,200,000,000,-
Violation of GDPR Paragraph:
46. Transfers subject to appropriate safeguards
Quelle:
Decision of the EDPB