The Irish Data Protection Commission (DPC) has announced the issuance of a €405m fine against Meta Platforms Ireland Limited (Instagram), as it concluded an inquiry began in 2020 which involved other European DPAs and the European Data Protection Board. The inquiry referred to Instagram’s processing of child users’ personal data, and particularly the social media registration process including the public disclosure of email addresses and/or phone numbers of children using the Instagram business account feature and a public-by-default setting for personal Instagram accounts of children. The EDPB has published a related binding decision, adopted according to Art. 65 of the EU GDPR. Find the Irish DPC announcement here and the EDPB decision here.
