Facebook Ireland Ltd, social media company, fined GBP 500,000

Essentials

Date of enforcement action:
24/Oct/2018
Jurisdiction: Fine imposed:
United Kingdom Flag for United Kingdom, which is the jurisdiction taking enforcement action GBP 500,000 (US$640,000)
Defendant company or entity: Industry segment:
Facebook Ireland Ltd, Facebook Inc Technology /

Case summary

The Information Commissioner found that the Facebook companies (i) unfairly processed personal data and (ii) failed to take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data. These findings related to the use of personal data for political purposes by clients of the Facebook companies, using a specific API interface. As a result of the conduct, data was released to, among others, SCL Elections Limited (a controlling entity of Cambridge Analytica).

Applicable legal provisions

Enforcement information

Enforcement authority: Type of enforcement action:
Information Commissioner's Office Flag for United Kingdom, which is the jurisdiction taking enforcement action Penalty notice
Subject to appeal?
Appeal finalised - settlement (the Facebook companies agreed to pay the original fine on 30/Oct/2019)

Cite this fine in your work

Data Privacy Fines Index. (2018-10-24 07:44) Facebook Ireland Ltd, social media company, fined GBP 500,000. dataprivacyfines.com. Retrieved from https://dataprivacyfines.com/fine/facebook-ireland-ltd-gbp-500000/

Entry last updated: 2020-01-12 11:40 GMT.