Data Protection Commission decisions · Regulatory Decisions

Meta Platforms Ireland Limited

Official identifier IN-19-4-1Decision date 26 Sep 2024
Ireland

Decision

Finding
The DPC found that plaintext password logging was a personal data breach and found infringements of GDPR Articles 33(1), 33(5), 5(1)(f) and 32(1), including failures to notify promptly, document the breaches and apply appropriate security measures.
Measures
Reprimand and three administrative fines totalling EUR 91 million.
Fine
91,000,000
Currency
EUR

Official source

Decision document
Corrigendum

Linked company

Company: META PLATFORMS IRELAND LIMITED
Official identifier: 462932

Source

Data Protection Commission decisions

View published source

Back to Data Protection Commission decisions