BanuData ProtectionFacebook record fine

May 25, 2023

Meta issued a record €1.2 billion fine for infringing GDPR

As a result of EDPB’s binding dispute resolution of 13 April 2023, Meta Platforms Ireland Limited was issued a 1.2 billion euro fine for its Facebook service. This fine was applied by the Irish Data Protection Authority and is the highest GDPR fine applied so far.

The fine was imposed for Meta’s transfers of personal data to the U.S. on the basis of standard contractual clauses since 16 July 2020. In addition to the fine, Meta was also ordered to bring its data transfers into compliance with the GDPR, including in what regards storage in the U.S. of personal data users in the EU transferred in violation of the GDPR.

We remind that companies need to undertake a case-by-case assessment to determine whether, in any given case, data transfers (including via servers) to a third country conducted under their terms are lawful or not.