(AGENPARL) - Roma, 28 Novembre 2022 - (AGENPARL) – lun 28 novembre 2022 PRESS RELEASE
28 November, 2022
13:00 (Irish Time)
Data Protection Commission announces decision in
Facebook “Data Scraping” Inquiry
The Data Protection Commission (DPC) has today announced the conclusion to an inquiry into Meta Platforms Ireland Limited (MPIL), data controller of the “Facebook” social media network, imposing a fine of €265 million and a range of corrective measures.
The DPC commenced this inquiry on 14 April 2021, on foot of media reports into the discovery of a collated dataset of Facebook personal data that had been made available on the internet. Thescopeof the inquiryconcerned an examination and assessment of Facebook Search, Facebook Messenger Contact Importer and Instagram Contact Importer tools in relation to processingcarriedoutbyMetaPlatformsIrelandLimited (‘MPIL’) during the period between 25 May 2018 and September 2019. The material issues in this inquiry concerned questions of compliance with the GDPR obligation for Data Protection by Design and Default. The DPC examined the implementation of technical and organisational measures pursuant to Article 25 GDPR (which deals with this concept).
There was a comprehensiveinquiry process, including cooperation with all of the other data protection supervisory authorities within the EU. Those supervisory authorities agreed with the decision of the DPC.
The decision,whichwasadoptedonFriday,25 November 2022, records findings of infringement of Articles 25(1) and 25(2) GDPR. The decision imposed a reprimand and an order requiring MPIL to bring its processing into compliance by taking a range of specified remedial actions within a particular timeframe. In addition, the decision has imposed administrative fines totalling €265 million on MPIL.
For media related queries, please contact Graham Doyle, Head of Communications, Data Protection Commission.