Meta fined €1.2bn for GDPR breach by Data Protection Commissioner

August Graham, PA Business Reporter

Facebook owner Meta has been fined €1.2 billion and was ordered to stop transferring user data from European users to its US servers.

The record fine was levied by the Data Protection Commission (DPC) after a three-year probe into the social media giant.

The DPC said that Meta had breached part of the European GDPR (General Data Protection Regulation) rules in the way that it had moved data of Facebook users across borders.

It ordered Meta Ireland to “suspend any future transfer of personal data to the US within the period of five months” and also levied a record fine on the business “to sanction the infringement that was found to have occurred”.

Latest News: Data Protection Commission announces conclusion of inquiry into Meta Ireland https://t.co/fFcppEOCFT pic.twitter.com/tTgLMlw3sY

— Data Protection Commission Ireland (@DPCIreland) May 22, 2023

Meta’s president of global affairs and chief legal officer Jennifer Newstead called the decision “flawed” and “unjustified” in a response posted to the company’s website.

“We are … disappointed to have been singled out when using the same legal mechanism as thousands of other companies looking to provide services in Europe,” she wrote.

“This decision is flawed, unjustified and sets a dangerous precedent for the countless other companies transferring data between the EU and US.

“We are pleased that the DPC also confirmed in its decision that there will be no suspension of the transfers or other action required of Meta, such as a requirement to delete EU data subjects’ data once the underlying conflict of law has been resolved.”

They added: “No country has done more than the US to align with European rules via their latest reforms, while transfers continue largely unchallenged to countries such as China.”