FineMeFine Intelligence
GDPRDPC · IE2023

Meta Platforms Ireland Limited

technology

€1.2B
Monetary fine

Summary

The DPC issued a €1.2 billion fine against Meta Ireland for transferring personal data of EU/EEA Facebook users to the United States without adequate safeguards.

Sources & documents

Published source material from DPC.

Document listings are temporarily unavailable.

    Article 83 factors applied

    Nature, gravity and duration:Severe — systemic, ongoing transfers to US over years
    Intentional or negligent character:Negligent — continued transfers despite Schrems II ruling
    Categories of personal data:General personal data of c. 300M EU users
    Degree of cooperation:Partial cooperation with supervisory authority
    Turnover of the undertaking:Global turnover ~$116B — statutory max applied

    Could have been avoided / reduced

    Timely adoption of supplementary measures after Schrems II (2020)
    Transition to EU-US Data Privacy Framework (certified July 2023)
    Proactive engagement with DPC on transfer impact assessments
    Data localisation for EU user data prior to ruling