November 8, 2023
Facebook has just been fined an astronomical 1.2 billion Euro – the biggest fine ever to be issued under GDPR.
The decision was made by Ireland’s Data Protection Commission on the basis that Facebook has been transferring user data from the EU to the US without proper safeguards which left the data vulnerable to US intelligence agencies.
The social media platform has also been ordered to suspend the transfer of user data from the EU to the US and was given a grace period of 06 months to do so.
The ruling, however, does not affect other social platforms of Meta – Facebook’s parent company, such as Instagram and WhatsApp. Meta has since stated its intention to appeal against the decision.
Link: https://www.theguardian.com/technology/2023/may/22/facebook-fined-mishandling-user-information-ireland-eu-meta
#data #socialmedia #facebook #intelligence #euro #gdpr #overseadatatransfer #biggest #fine
CJEU confirms that competitors can sue each other for GDPR infringements A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether […]
Learn more
EDPB’s Guidelines on Legitimate Intesrest Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest). Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply […]
Learn more
Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]
Learn more