Meta receives a record fine of 1.2 billion euros in Europe

The Irish Data Protection Constable condemns the American for an illegal transfer of European user data to the United States.

By
Le Figaro

Posted update

This content is not accessible.

The decision of the Irish Cnil is based on the invalidation in 2020 by the Court of Justice of the European Union of the “Privacy Shield“. DADO RUVIC / REUTERS

The Irish Data Protection Agency (DPA) has just imposed a record fine on Meta. The American company was ordered to pay 1.2 billion euros for continuing to transfer data from European users of Facebook to servers located in the United States, after the invalidation of an agreement between the two geographical areas, known as the “privacy shield”. Never had a company been sentenced to such an amount for this type of offense in Europe. The DPA also orders Meta to “suspend any transfer of personal data to the United States within five months» following the notification of its decision and to comply with the GDPR within six months. Denouncing an “unjustified and unnecessary” fine, Meta will appeal to justice.

At the origin of all this procedure, an Austrian lawyer, Max Schrems, Facebook user had filed a complaint against the company believing that his data collected by Facebook Ireland were, once transferred to Facebook Inc. in the United States, at the mercy of local laws in force, such as those on the surveillance of electronic communications, or the Cloud Act, which gives broad powers to the American National Security Agency (NSA). In 2013, whistleblower Edward Snowden revealed the extent of the agency’s surveillance program, which can access users’ personal information through companies such as Facebook and Google.

In 2015, European justice had invalidated a first agreement governing the transfer of data between Europe and the United States (the “Safe Harbor”), which had forced the European Commission and the United States to propose a new mechanism , the Privacy Shield, also challenged by the Court of Justice of the European Union in 2020.

In March 2022, the European Union and the United States announced that they had reached a new agreement on data transfers, but the legal framework has not yet been adopted.

It is a “serious blow to Meta“Reacted in a press release the association for the defense of privacy noyb, to which Max Schrems belongs.

(More info to follow)

source site