Meta fined record $1.3B in GDPR data transfer ruling

Facebook Ireland

The Irish Data Protection Commission (DPC) on Monday announced a record penalty of 1.2 billion euros (U.S. $1.3 billion) against Meta regarding its transfers of user data from the European Union to the United States in violation of the General Data Protection Regulation (GDPR).

The long-awaited decision is of significant relevance to all companies engaging in transatlantic data transfers, as the ruling requires Meta Ireland to suspend any future transfer of personal data to the United States within five months. The penalty in the case is the largest under the GDPR, surpassing the yet-to-be-finalizedp €746 million (U.S. $806 million) fine assessed against Amazon by the Luxembourg data protection authority (DPA) in July 2021.

Meta, the parent company of Facebook, Instagram, and WhatsApp, said it would appeal the decision, including the fine. The company expects the issue of transatlantic data transfers will be soon addressed once the European Union and United States reach agreement on a new transfer framework.

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.