Facebook parent Meta was fined with a record amount of $1.3 billion (1.2 billion euros), on Monday (May 22). The fine was levied for the company’s failure to comply with a warning by the top European Union court related to the data transfer of Facebook’s EU users to servers in the United States, said Ireland’s regulator.&nbsp;

The social media giant has also been given orders to stop transferring user data across the Atlantic by October.&nbsp;

<h2>Why is Facebook being fined?</h2>

According to Ireland’s Data Protection Commission (DPC), which acts on behalf of the EU, the social media giant failed&nbsp;to heed a top court warning aimed at protecting users’ data from the security services in the US&nbsp;once it’s shipped to servers across the Atlantic.&nbsp;

The commission also alleged that Meta continued data transfers to the US without addressing “the risks to the fundamental rights and freedoms” of people whose data was being transferred to the US. The DPC had been investigating Meta Ireland’s transfer of personal data from the EU to the US since 2020.&nbsp;

The social media giant was given five months to “suspend any future transfer of personal data to the US” and six months to stop “the unlawful processing, including storage, in the US” of transferred personal EU data.

<h2>EU about the fine on Meta</h2>

The supposed privacy breach has prompted the largest fine “ever” under the EU’s General Data Protection Regulation (GDPR), said the European Data Protection Board (EDPB).&nbsp;

The European Data Protection Board (EDPB) chair Andrea Jelinek following the announcement said, Meta’s breach is “very serious since it concerns transfers that are systematic, repetitive and continuous.”

Jelinek also said that since Facebook has millions of users in Europe “the volume of personal data transferred is massive. The unprecedented fine is a strong signal to organizations that serious infringements have far-reaching consequences.”

The announcement also coincides with the fifth anniversary of the GDPR which is seen as the world’s benchmark for privacy.&nbsp;The penalty doled out for Meta surpassed the highest previous record fine imposed by the EU for Amazon $821 million (746 million euros). 
 
This comes after Amazon was forced to pay a fine of the previously mentioned amount by Luxembourg, in 2021 for similarly flouting the EU’s privacy standards.&nbsp;

<h2>Meta reacts to announcement</h2>

Meta following the announcement of the fine, on Monday, said it would appeal the decision, including the “unjustified and unnecessary fine,” and seek a stay of the orders through the courts.&nbsp;

Meta president of global affairs Nick Clegg and chief legal officer Jennifer Newstead said the company was “disappointed to have been singled out,” and called the ruling “flawed”. Meta’s representatives also warned that the ruling sets a “dangerous precedent for the countless other companies”.&nbsp;

They added, “There is no immediate disruption to Facebook in Europe.”&nbsp;

The company which also owns WhatsApp and Instagram had also previously warned that suspending data transfers on the basis of (SCCs) could have “a far-reaching effect on businesses that rely on SCCs (Facebook and other tech giants) and on the online services many people and businesses rely on”.

Earlier this year, Meta reiterated that without SCCs or “other alternative means of data transfers” it would “likely” not be able to offer access to social media platforms like Facebook and Instagram, across Europe.&nbsp;

<h2>DCP’s authority questioned</h2>

As per AFP, the Irish regulators only wanted to force Meta to suspend the offending data transfers and that the fine would “exceed the extent of powers that could be described as being ‘appropriate, proportionate and necessary’”. However, their EU counterpart, Concerned Supervisory Authorities (CSAs), disagreed and said, “All four CSAs took the view that Meta Ireland should be subject to an administrative fine.”&nbsp;

Since there was no consensus the matter was sent to the EDPB who ruled that Meta should not only stop the transfers but also pay the record amount of fine. Notably, this is the third fine imposed by the EU on Meta this year and the fourth one in the past six months.&nbsp;

Clegg and Newstead said the EDPB decision to overrule the DPC “raises serious questions,” adding that the US has done more than any other country to comply with EU’s standards and “their latest reforms, while transfers continue largely unchallenged to countries such as China.”&nbsp;

This comes as EU regulators back in December unveiled proposals to replace the previous “Privacy Shield” pact that had been rejected by the EU’s top court. This led to months of negotiations ending with US President Joe Biden’s executive order assuring EU citizens’ data is safe once it’s shipped across the Atlantic.&nbsp;

<h2>Why now?</h2>

The decision follows revelations by Edward Snowden, the former US National Security Agency contractor back in 2013 and a legal challenge brought by an Austrian privacy campaigner, Max Schrems.&nbsp;

Schrems has expressed concerns that European users’ data is not sufficiently protected from US’ intelligence agencies after Snowden disclosed that officials across the Atlantic have repeatedly accessed people’s information via tech companies like Facebook, Google, and so on.&nbsp;

Notably, Scherms’ lawsuit began a decade-long legal battle over the legality of transferring EU data to the US. According to Reuters, EU regulators led by Ireland’s Data Protection Commissioner Helen Dixon have also been in the midst of finalising the ban on a legal tool used by Facebook to transfer European user data.&nbsp;

This comes as the Irish DPC was given one month, back in April to chalk out the details of the order to block Facebook’s transatlantic data flows, as per which, the ban would take place sometime in mid-May, reported Reuters.&nbsp;

Europe’s highest court, the Court of Justice of the European Union (CJEU), also ruled in 2020 and repeatedly said that an agreement between the EU-US for data transfer was invalid and concluded that Washington does not have sufficient systems in place to protect European data.

However, the judges at the time did not strike down an alternative tool based on contractual clauses but prompted the Irish authorities to issue a preliminary order stating that Facebook can no longer move data to the US via this other method either.&nbsp;

(With inputs from agencies)&nbsp; 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Facebook parent Meta was fined with a record amount of $1.3 billion (1.2 billion euros), on Monday (May 22). The fine was levied for the company’s failure to comply with a warning by the top European Union court related to the data transfer of Facebook’s EU users to servers in the United States, said Ireland’s regulator.

Facebook parent Meta was fined with a record amount of $1.3 billion (1.2 billion euros), on Monday (May 22). The fine was levied for the company’s failure to comply with a warning by the top European Union court related to the data transfer of Facebook’s EU users to servers in the United States, said Ireland’s regulator. The social media giant has also been given orders to stop transferring user data across the Atlantic by October. Why is Facebook being fined? According to Ireland’s Data Protection Commission (DPC), which acts on behalf of the EU, the social media giant failed to heed a top court warning aimed at protecting users’ data from the security services in the US once it’s shipped to servers across the Atlantic. The commission also alleged that Meta continued data transfers to the US without addressing “the risks to the fundamental rights and freedoms” of people whose data was being transferred to the US. The DPC had been investigating Meta Ireland’s transfer of personal data from the EU to the US since 2020. The social media giant was given five months to “suspend any future transfer of personal data to the US” and six months to stop “the unlawful processing, including storage, in the US” of transferred personal EU data. EU about the fine on Meta The supposed privacy breach has prompted the largest fine “ever” under the EU’s General Data Protection Regulation (GDPR), said the European Data Protection Board (EDPB). The European Data Protection Board (EDPB) chair Andrea Jelinek following the announcement said, Meta’s breach is “very serious since it concerns transfers that are systematic, repetitive and continuous.” Jelinek also said that since Facebook has millions of users in Europe “the volume of personal data transferred is massive. The unprecedented fine is a strong signal to organizations that serious infringements have far-reaching consequences.” The announcement also coincides with the fifth anniversary of the GDPR which is seen as the world’s benchmark for privacy. The penalty doled out for Meta surpassed the highest previous record fine imposed by the EU for Amazon $821 million (746 million euros). This comes after Amazon was forced to pay a fine of the previously mentioned amount by Luxembourg, in 2021 for similarly flouting the EU’s privacy standards. Meta reacts to announcement Meta following the announcement of the fine, on Monday, said it would appeal the decision, including the “unjustified and unnecessary fine,” and seek a stay of the orders through the courts. Meta president of global affairs Nick Clegg and chief legal officer Jennifer Newstead said the company was “disappointed to have been singled out,” and called the ruling “flawed”. Meta’s representatives also warned that the ruling sets a “dangerous precedent for the countless other companies”. They added, “There is no immediate disruption to Facebook in Europe.” The company which also owns WhatsApp and Instagram had also previously warned that suspending data transfers on the basis of (SCCs) could have “a far-reaching effect on businesses that rely on SCCs (Facebook and other tech giants) and on the online services many people and businesses rely on”. Earlier this year, Meta reiterated that without SCCs or “other alternative means of data transfers” it would “likely” not be able to offer access to social media platforms like Facebook and Instagram, across Europe. DCP’s authority questioned As per AFP, the Irish regulators only wanted to force Meta to suspend the offending data transfers and that the fine would “exceed the extent of powers that could be described as being ‘appropriate, proportionate and necessary’”. However, their EU counterpart, Concerned Supervisory Authorities (CSAs), disagreed and said, “All four CSAs took the view that Meta Ireland should be subject to an administrative fine.” Since there was no consensus the matter was sent to the EDPB who ruled that Meta should not only stop the transfers but also pay the record amount of fine. Notably, this is the third fine imposed by the EU on Meta this year and the fourth one in the past six months. Clegg and Newstead said the EDPB decision to overrule the DPC “raises serious questions,” adding that the US has done more than any other country to comply with EU’s standards and “their latest reforms, while transfers continue largely unchallenged to countries such as China.” This comes as EU regulators back in December unveiled proposals to replace the previous “Privacy Shield” pact that had been rejected by the EU’s top court. This led to months of negotiations ending with US President Joe Biden’s executive order assuring EU citizens’ data is safe once it’s shipped across the Atlantic. Why now? The decision follows revelations by Edward Snowden, the former US National Security Agency contractor back in 2013 and a legal challenge brought by an Austrian privacy campaigner, Max Schrems. Schrems has expressed concerns that European users’ data is not sufficiently protected from US’ intelligence agencies after Snowden disclosed that officials across the Atlantic have repeatedly accessed people’s information via tech companies like Facebook, Google, and so on. Notably, Scherms’ lawsuit began a decade-long legal battle over the legality of transferring EU data to the US. According to Reuters, EU regulators led by Ireland’s Data Protection Commissioner Helen Dixon have also been in the midst of finalising the ban on a legal tool used by Facebook to transfer European user data. This comes as the Irish DPC was given one month, back in April to chalk out the details of the order to block Facebook’s transatlantic data flows, as per which, the ban would take place sometime in mid-May, reported Reuters. Europe’s highest court, the Court of Justice of the European Union (CJEU), also ruled in 2020 and repeatedly said that an agreement between the EU-US for data transfer was invalid and concluded that Washington does not have sufficient systems in place to protect European data. However, the judges at the time did not strike down an alternative tool based on contractual clauses but prompted the Irish authorities to issue a preliminary order stating that Facebook can no longer move data to the US via this other method either. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Explained | EU fines Facebook parent company Meta record $1.3 billion over data transfer to US

Two official World Cup apps are currently being evaluated by a UK data regulator over concerns that the authorities in Qatar may have been secretly spying on the English fans.

Data Regulators: Visitors could be monitored, fans told to download Ehteraz and Hayya apps

The EU’s new data regulation is slated to come into effect this week on May 25. The General Data Protection Regulation (GDPR) promises more power to individuals and puts companies with a large pool of user data under the scanner.

This means that with the new regulation coming into force, individuals can now demand companies to reveal or delete their personal data.

The law will replace the 1995 Data Protection Directive and will finally be put to practice after seven years of debate.&nbsp

The GDPR will primarily have companies under its purview, firms of all kinds ranging from technology, banking, to advertising among others. The lot that is likely to bear the most brunt includes companies that primarily deal with acquiring and exploiting large-scale consumer data.

Companies will now need to practice utmost transparency while dealing with consumer data. Consent will have paramount significance, without consumer consent it will now be difficult for companies to process an individual's personal information.&nbsp

The GDPR rollout, this Friday, will mean that users will have the power to hold companies accountable for data breach like never before. Tech giants will now be pressured into changing policies and ushering in new measures that would provide more transparency with respect to the usage and processing of user information that they collect.&nbsp

Facebook, for instance, recently introduced tools that let its users manage, control, edit, review, download and delete information that is shared on/with Facebook as well as with third-party entities.&nbsp

GDPR has ambitious goals to achieve, whether or not it will work to avoid events like the Facebook-Cambridge Analytica episode is for all of us to see. The new regulation will have companies on their toes, cautious like never before as they face the risk of paying as much as 4% of their global turnover as a fine for violating the regulation.&nbsp

Companies will now need to practice utmost transparency while dealing with consumer data

The EU’s new data regulation is slated to come into effect this week on May 25. The General Data Protection Regulation (GDPR) promises more power to individuals and puts companies with a large pool of user data under the scanner. This means that with the new regulation coming into force, individuals can now demand companies to reveal or delete their personal data. The law will replace the 1995 Data Protection Directive and will finally be put to practice after seven years of debate. The GDPR will primarily have companies under its purview, firms of all kinds ranging from technology, banking, to advertising among others. The lot that is likely to bear the most brunt includes companies that primarily deal with acquiring and exploiting large-scale consumer data. Companies will now need to practice utmost transparency while dealing with consumer data. Consent will have paramount significance, without consumer consent it will now be difficult for companies to process an individual's personal information. The GDPR rollout, this Friday, will mean that users will have the power to hold companies accountable for data breach like never before. Tech giants will now be pressured into changing policies and ushering in new measures that would provide more transparency with respect to the usage and processing of user information that they collect. Facebook, for instance, recently introduced tools that let its users manage, control, edit, review, download and delete information that is shared on/with Facebook as well as with third-party entities. GDPR has ambitious goals to achieve, whether or not it will work to avoid events like the Facebook-Cambridge Analytica episode is for all of us to see. The new regulation will have companies on their toes, cautious like never before as they face the risk of paying as much as 4% of their global turnover as a fine for violating the regulation.

What is GDPR? EU's new data regulation law may choke tech giants

data-regulation

Data Regulation, News on Data Regulation, stories on Data Regulation, articles on Data Regulation, Data Regulation stories at Wion, Data Regulation news, Data Regulation latest news