According to a draft decision, Facebook can face a fine for having violating its own transparency obligations under the GDPR. A fine of between 28 and 36 million euros was proposed by the Data Protection Supervisory Authority of Ireland (DPC), Facebook's consequence for not having adequately informed its users about its data process. Austrian activist, Max Schrems, filed the complaint against Facebook. The DPC's draft decision was published on October 13th. The draft decision describes the offense as a “serious matter” and says the case concerns “vast sets of personal data affecting millions of data subjects. In particular, I note the impact that lack of transparency has on a person's ability to be informed about their data protection rights. I take into account the failure of an organization of this size, arising from the impossibility of providing materials that are sufficiently transparent in relation to its business model”, points out an Irish supervisory authority in the document. The DPC is the main supervisor for Facebook in the EU, with its European headquarters in Ireland. See here for more information:
Comments