On September 15, 2022, the Irish Data Protection Commission (“DPC”) announced the imposition of a €405 million fine against Meta Platforms stemming from alleged violations of the EU’s General Data Protection Regulation (“GDPR”).
According to the DPC, the allegations focused on “the public disclosure of email addresses and/or phone numbers of children using the Instagram business account feature and a public-by-default setting for personal Instagram accounts of children.” In addition to the fine, the DPC order requires Meta to adopt certain remedial measures to ensure compliance moving forward.
Reports indicate that Meta is reviewing the decision and considering whether to file an appeal.
DPC press release | DPC decision | EDPB press release | EDPB decision