Draft decision on Facebook data breach submitted to EU authorities
A draft decision in a large-scale investigation of a Facebook data breach has been submitted by Ireland’s data protection watchdog to other EU authorities.
The Data Protection Commission (DPC) commenced the inquiry into Meta Platforms Ireland Limited (MPIL), which operates Facebook, in April 2021 after media reports highlighted that a collated dataset of Facebook user personal data had been made available on the internet.
The inquiry concerned the question of MPIL’s compliance with its obligations under Articles 25(1) and 25(2) GDPR (“data protection by design and by default”).
Graham Doyle, deputy commissioner, said: “The DPC submitted its draft decision to its colleagues last Friday, 30 September, for their views on it.
“This is part of the process under Article 60 of the GDPR, where the DPC sends draft decisions to other concerned supervisory authorities and they have one month to review its draft decision and raise any ‘relevant and reasoned objections’ that they may have.”