Meta slapped with record $1.3 billion fine over EU-US data transfers

AppleInsider

Meta has been hit by a record-breaking fine of 1.2 billion euros ($1.3 billion) by the European Union, for breaking digital privacy rules by transferring the data of EU citizens to U.S. servers.

Mark Zuckerberg

Stemming from a case created by Austrian privacy campaigner Max Schrems, Ireland's Data Protection Commission alleged that the legal framework for transferring data to the U.S. were a violation of GDPR, data protection law covering Europe.

The ruling, performed by the Data Protection Commission of Ireland, alleges the existing legal framework for data transfers from the EU to the U.S. "did not address the risks to the fundamental rights and freedoms" of Facebook users in Europe.

Previously, the European Court of Justice struck down a previous mechanism for transferring data legally, referred to as Privacy Shield, in 2020. The DPC says Meta is continuing to send the data despite the ruling's occurrence.

The fine of 1.2 billion euros is also accompanied by an order by the DPC to suspend "any future transfer of personal data to the US within a period of five months."

Meta's fine is also the largest related to GDPR breaches, far exceeding a 746 million euro fine against Amazon in 2021.

Meta President of Global Affairs Nick Cleg and Chief Legal Officer Jennifer Newstead said in a statement the company plans to appeal.

Read on AppleInsider

sflagel

Fair enough. EU citizens have the right to be subject to their laws, not the US's. That includes data.

chasm

sflagel said:

Fair enough. EU citizens have the right to be subject to their laws, not the US's. That includes data.

You’re 100 percent right, but that fine needs at least an extra zero on it before Zuck will pay any attention to it. Meta made $5.7B profit in *the most recent quarter*, so a $1.3B fine every year or two will likely be seen as the cost of doing business.

Both the US and EU regulatory agencies need to start fining companies a hefty percentage of their *annual* revenue for ongoing violations. Once you start messing with a company’s profits, shareholders will put pressure on the execs to follow the law.

Calamander

These regulations and their tyrannical enforcement look like they are for you, the EU citizen. 

But actually, they're against you - they're just the government adding more tools to its tool belt to issue fines and bring corporations in line. 

It's a power grab, all done under the disguise of serving the people. 

The corrupt, unelected government of the EU only acts to perpetuate its own power. 

Of course when they strike against Meta, everyone cheers - but when it turns out we can't have small independent businesses anymore because these government bureaucrats can use the law against any of them any time, we realize that this was always created to centralize power, to give more power to government, and to also - ironically - give the internet giants more power. 

Facebook has 100M to fight this in the courts and another 100M to settle, or even more. No problem! 

But small startups can be permanently shut down by these laws, and that's why they were in reality created in the first place. 

avon b7

Calamander said:

These regulations and their tyrannical enforcement look like they are for you, the EU citizen. 

But actually, they're against you - they're just the government adding more tools to its tool belt to issue fines and bring corporations in line. 

It's a power grab, all done under the disguise of serving the people. 

The corrupt, unelected government of the EU only acts to perpetuate its own power. 

Of course when they strike against Meta, everyone cheers - but when it turns out we can't have small independent businesses anymore because these government bureaucrats can use the law against any of them any time, we realize that this was always created to centralize power, to give more power to government, and to also - ironically - give the internet giants more power. 

Facebook has 100M to fight this in the courts and another 100M to settle, or even more. No problem! 

But small startups can be permanently shut down by these laws, and that's why they were in reality created in the first place. 

The laws are there to protect our data. They are applicable universally and there is a site (can't remember where now) that keeps a running list of sanctions.

These mega-fines grab the attention but that list is full of private individuals too who have been fined 40€ or 100€ etc for different infractions.

It's a very complex situation but the EU approach, while 'strict' to a point, is also considered to be a very good shield for EU users and a model for other stabs at data protection around the world. 

Meta will supposedly Appeal but if they haven't complied they will not get off the hook. If they persist and prefer to pay fines, it is very likely that legislation will be designed to deal with those cases specifically. 

What we can't have is companies that think they can flout data protection legislation and get away with it. 

chutzpah

Calamander said:

These regulations and their tyrannical enforcement look like they are for you, the EU citizen. 

But actually, they're against you - they're just the government adding more tools to its tool belt to issue fines and bring corporations in line. 

It's a power grab, all done under the disguise of serving the people. 

The corrupt, unelected government of the EU only acts to perpetuate its own power. 

Of course when they strike against Meta, everyone cheers - but when it turns out we can't have small independent businesses anymore because these government bureaucrats can use the law against any of them any time, we realize that this was always created to centralize power, to give more power to government, and to also - ironically - give the internet giants more power. 

Facebook has 100M to fight this in the courts and another 100M to settle, or even more. No problem! 

But small startups can be permanently shut down by these laws, and that's why they were in reality created in the first place. 

Utter nonsense.

bobolicious

For consideration: 
en.wikipedia.org/wiki/Patriot_Act
en.wikipedia.org/wiki/Surveillance_capitalism
... and of course this humour from www.theonion.com/cias-facebook-program-dramatically-cut-agencys-costs-1819594988

spheric

Calamander said:

These regulations and their tyrannical enforcement look like they are for you, the EU citizen. 

But actually, they're against you - they're just the government adding more tools to its tool belt to issue fines and bring corporations in line. 

So much to unpack here, but the gist here is really that you — for whatever bizarre reason — believe that bringing corporations in line with actual laws is somehow a Bad Thing. 

That's just weird. 

Calamander said:

t's a power grab, all done under the disguise of serving the people. 

It's not a "grab" for power, it's wielding of power. The EU HAS the power to enforce its laws — it doesn't need to "grab" it. 

We, the people, gave it that power, and we trust the EU to make anybody hurt who flaunts our laws — especially on privacy and data protection. 

Calamander said:

The corrupt, unelected government of the EU only acts to perpetuate its own power. 

The EU parliament is directly elected by the citizens of the EU. 

The European Court of Justice is actually appointed by the member states, with each seat serving a term of six years. It is as such MORE democratically representative than your Supreme Court, where whoever is in power gets to appoint judges to fill seats, and they hold a lifetime position, regardless of representation. 

Their job is not to "perpetuate power", but simply to punish those who break the law. Not a difficult concept to grasp. 

I know you didn't know that, and you don't care, but do take note, lest you look like an idiot over and over again. 


Calamander said:

Of course when they strike against Meta, everyone cheers - but when it turns out we can't have small independent businesses anymore because these government bureaucrats can use the law against any of them any time, we realize that this was always created to centralize power, to give more power to government, and to also - ironically - give the internet giants more power. 

Yes, the point is to have ONE court prosecute violations of European law, rather than 27 individual courts wasting resources on 27 violations of local laws. This is centralisation, true. 

We're not cheering because this is against Meta; we're cheering because those colossal fuckwads have been brazenly doing what they were told a decade ago NOT to do, what they KNEW was in violation of the law, and despite having suggested a method that was DENIED as still being in violation, CONTINUED to break the law. 

Fuck them. 

This kind of conduct needs to result in fines that REALLY HURT. 

Calamander said:

But small startups can be permanently shut down by these laws, and that's why they were in reality created in the first place. 

Yes, small business and freelancers can and do get royally fucked by GDPR (data protection regulation) fines when they violate the law. 

There's a really easy way to avoid that, though: follow the law. 

Actually, that's not actually that easy: it caused major headaches for a lot of us and requires a solid and verifiable privacy concept for anybody doing business here. 

That seems very alien to someone apparently from a country where there is no concept of privacy. But I assure you, this is actually how we — the citizens of the EU — want it. 

If you purposely and routinely play fast and loose with my personal data, I want you off the market. 

Hedware

Calamander said:

These regulations and their tyrannical enforcement look like they are for you, the EU citizen. 

But actually, they're against you - they're just the government adding more tools to its tool belt to issue fines and bring corporations in line. 

It's a power grab, all done under the disguise of serving the people. 

The corrupt, unelected government of the EU only acts to perpetuate its own power. 

Of course when they strike against Meta, everyone cheers - but when it turns out we can't have small independent businesses anymore because these government bureaucrats can use the law against any of them any time, we realize that this was always created to centralize power, to give more power to government, and to also - ironically - give the internet giants more power. 

Facebook has 100M to fight this in the courts and another 100M to settle, or even more. No problem! 

But small startups can be permanently shut down by these laws, and that's why they were in reality created in the first place. 

I bet you would be singing a different tune if China started to take the personal data of US citizens. You would be wanting to copy the EU laws.