Irish DPC fines Meta €91m for password storage failures

Meta Ireland stored social media users passwords in ‘plaintext’ without encryption.

Meta Platforms Ireland Limited has once again been fined by the Irish Data Protection Commission (DPC) for EU GDPR violations. This time, the social media giant was fined €91m ($101m) for storing users’ passwords without encryption or cryptographic protection.

The DPC started investigating Meta in April 2019 after it notified

“It

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in