The Data Protection Commission has imposed a €17m fine on Facebook parent company Meta.
The fines relate to a series of 12 data breaches in a six-month period between June and December 2018.
A DPC inquiry found that Meta failed to have in place “appropriate technical and organisational measures” that would have enabled it to demonstrate the security measures that it was using to protect EU users' data at the time.
The DPC inquiry related to ‘cross-border’ processing of data and all of the other European supervisory authorities were engaged as “co-decision makers”.
In a statement, the DPC said two of the other European authorities originally objected to the DPCs draft decision; however, “consensus was achieved through further engagement”.
As a result it said the decision announced this afternoon "represents the collective views of both the DPC and its counterpart supervisory authorities throughout the EU".
