Ireland fines Meta €17 million for 2018 data breaches

In a cross border case that was initiated in 2018, Ireland’s Data Protection Commission yesterday announced that it is fining Meta Platforms Ireland Limited (formerly Facebook Ireland Limited) €17 million for breaches of GDPR Articles 5(2) – accountability regarding data protection principles - and 24(1) – implementing appropriate technical and organisational measures.

“The DPC’s decision was subject to the co-decision-making process outlined in Article 60 GDPR and all of the other European supervisory authorities were engaged as co-decision-makers. While objections to the DPC’s draft decision were raised by two of the European supervisory authorities, consensus was achieved through further engagement between the DPC and the supervisory authorities concerned,” Ireland’s DPA says in a statement.

It has not been announced whether the fine was increased or decreased as a result of the objections, or which DPAs objected.

See: Data Protection Commission press release