Ireland’s Data Protection Commission has fined Meta Platforms Ireland a record €1.2 billion for transferring Facebook users’ personal data to the United States using standard contractual clauses.
Key points
- The largest GDPR fine imposed to date.
- Meta is ordered to suspend future transfers and bring processing into compliance.
- The decision follows an EDPB binding decision on the case.
- It highlights the risks of transfers following the Schrems II ruling.
UK organisations relying on US cloud and SaaS providers should review their transfer risk assessments and supplementary measures.
Source: DPC announces conclusion of inquiry into Meta Ireland (Data Protection Commission)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
