Friday

29th Sep 2023

Meta's €1.2bn fine — a GDPR win, inconsequential for user privacy?

  • Facebook still has numerous opportunities to appeal the fine, both under Irish law and at the European Court of Justice (Photo: Amy Osborne / Getty Images)
Listen to article

Meta, Facebook's parent company, on Monday (22 May) was fined a record €1.2bn under GDPR for unlawful data transfers to the US by Ireland's data protection watchdog.

However, doubts remain over the consequentiality of the decision for user privacy, as a new EU-US data transfer agreement is set to be signed before Meta would actually have to delete user data from US servers.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

Moreover, as with previous record-setting fines for US big tech companies under GDPR, Facebook still has numerous opportunities to appeal the fine, both under Irish law and at the European Court of Justice.

Under the conditions of the fine, Meta has until 12 November of this year to move back or delete user data from US servers, but is unlikely to actually have to comply. Since March 2022, EU and US officials have agreed on the political terms of the EU-US Data Privacy Framework (DPF), a data-transfer agreement set up to harmonise GDPR legislation with US data collection.

Originally slated to be signed in July of this year, Estelle Massé, campaigner at digital privacy NGO Access Now, told EUobserver that it is likely to be postponed to October — still in time for Facebook to not have to delete EU user data.

"This [decision] might not mean much for people's rights," Massé said. "In practice, it would mean that actually Facebook would have to do nothing, because they would have a new legal basis under which the data can move to the US and stay there."

The €1.2bn fine is obviously a huge amount of money, but Massé expects that Meta's stock won't suffer from the setback. "They've been setting aside money for quite some time now in preparation for this fine," she said. "Based on what they told their investors just a month ago, and what they were expecting [from this fine], I'm expecting Facebook stock to go up today."

In April of this year, Meta issued a warning in their earnings report that up to 10 percent of its global ad revenue could be at risk from the fine issued by the Irish regulators. "Obviously, they always set aside money for this and many other fines. I think they had put aside €1.6bn, so €1.2bn was a good gift," Massé quipped.

And that is if they have to pay the full sum at all. Of all the record-setting fines issued by national legislators under GDPR since 2016, almost all of them are still winding their way through appeals. "We passed the €4bn mark of fines issued under GDPR. But if we were to research and compare how much of these fines have actually been paid, we haven't reached €4bn."

"It's progress on the fine level," Massé said. But at the same time, it might not do much for user data protection.

"Concretely, the GDPR is about protecting data protection violations for people. And what we're being told, as people, by this decision, is that this company has been moving your data unlawfully, it is currently holding your data somewhere unlawfully, and now we give it six months to fix that solution by either deleting it or moving it back to where it's legal for the company to have it. But the small print is that within six months' time, they will be able to keep it there. So it means that we're accepting that the unlawful situation continues for six more months until it's no longer unlawful for them to do that," she said.

Not all is lost though. Privacy campaigner Max Schrems, who filed a complaint with the Irish data protection regulators a decade ago and has continued to litigate, said in a statement that the new EU-US DPF is unlikely to hold before the European Court of Justice (CJEU).

"Meta plans to rely on the new deal for transfers going forward, but this is likely not a permanent fix. In my view, the new deal has maybe a ten percent chance of not being killed by the CJEU. Unless US surveillance laws get fixed, Meta will likely have to keep EU data in the EU," Schrems said.

He also believes that Meta's threats of withdrawing services from the EU as a result of data protection regulation are "laughable". Europe is the biggest market for the social media giant outside of the US, so withdrawing is an "empty threat", he said.

GDPR has been in force since 2016, which should have given Meta — and other big tech companies — ample time to have fixed the data transfer issues. "I'm not going to feel sorry for them not being ready to comply with the law that they knew was coming," Massé said.

Are EU data watchdogs staffed for GDPR?

The success of the new general data protection regulation (GDPR) will depend on whether data protection authorities enforce the new rules - which, in turn, will be at least partly determined by how many people they employ.

Tech industry now spends €113m a year lobbying Brussels

Tech companies have increased their lobbying power and are now spending some €113m a year to influence EU decision-making, up more than 16 percent since 2021, according to a report from NGOs Corporate Europe Observatory and LobbyFacts.

EU lists six tech giants as 'gatekeepers' under new law

A total of 22 "core platform services" provided by these six tech gatekeepers now have until March 2024 to comply with strict new EU rules — aimeed to promote fair competition and give users more power over their devices.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

Column

EU lobbying clean-up — what happened to that?

Six months after Qatargate, as institutional inertia and parliamentary privileges weigh in, the sense of gravity and collective resolve have all but disappeared. MEPs show little enthusiasm for reform of the rules that today allow them significant outside paid activities.

Latest News

  1. Poland's culture of fear after three years of abortion 'ban'
  2. Time for a reset: EU regional funding needs overhauling
  3. Germany tightens police checks on Czech and Polish border
  4. EU Ombudsman warns of 'new normal' of crisis decision-making
  5. How do you make embarrassing EU documents 'disappear'?
  6. Resurgent Fico hopes for Slovak comeback at Saturday's election
  7. EU and US urge Azerbijan to allow aid access to Armenians
  8. EU warns of Russian 'mass manipulation' as elections loom

Stakeholders' Highlights

  1. International Medical Devices Regulators Forum (IMDRF)Join regulators, industry & healthcare experts at the 24th IMDRF session, September 25-26, Berlin. Register by 20 Sept to join in person or online.
  2. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  3. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  4. International Medical Devices Regulators Forum (IMDRF)Join regulators & industry experts at the 24th IMDRF session- Berlin September 25-26. Register early for discounted hotel rates
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Stakeholders' Highlights

  1. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  2. ICLEISeven actionable measures to make food procurement in Europe more sustainable
  3. World BankWorld Bank Report Highlights Role of Human Development for a Successful Green Transition in Europe
  4. Nordic Council of MinistersNordic summit to step up the fight against food loss and waste
  5. Nordic Council of MinistersThink-tank: Strengthen co-operation around tech giants’ influence in the Nordics
  6. EFBWWEFBWW calls for the EC to stop exploitation in subcontracting chains

Join EUobserver

Support quality EU news

Join us