Irish regulator fines Meta €265m for GDPR failings

Data protection “by design and default” failings in Meta’s software led to the exposure of personal details of 533 million users.

The Irish Data Protection Commission (DPC) has imposed a fine of €265m ($275m) Meta, which is the parent entity and data controller for Facebook and Instagram.

The fine, along with a range of specific corrective measures within a stipulated timeframe, is being imposed as a result of the publication of

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in