User Data Breach: Meta Hit with $263 Million Fine in Europe

Meta Platforms Inc. has faced another substantial financial penalty in Europe, as the Irish Data Protection Commission (DPC) imposed a €251 million ($US263 million) fine for a significant data breach that occurred in 2017. This latest fine adds to the mounting costs the tech giant has incurred due to regulatory actions in the European Union.

According to a report by TechCrunch, the breach was a result of hackers exploiting a vulnerability in the video upload feature of Facebook. The DPC reported that these malicious actors were able to access sensitive personal information belonging to approximately 29 million Facebook users worldwide, including around 3 million users situated within the EU/EEA region.

In the words of the DPC:

“The categories of personal data affected included: user’s full name; email address; phone number; location; place of work; date of birth; religion; gender; posts on timelines; groups of which a user was a member; and children’s personal data.”

The DPC’s investigation concluded that Meta failed to comply with essential data protection principles, leading to this hefty fine. This decision underscores the importance of maintaining robust security measures and adhering to data protection regulations to safeguard user information effectively.

“This enforcement action highlights how the failure to build in data protection requirements throughout the design and development cycle can expose individuals to very serious risks and harms, including a risk to the fundamental rights and freedoms of individuals. Facebook profiles can, and often do, contain information about matters such as religious or political beliefs, sexual life or orientation, and similar matters that a user may wish to disclose only in particular circumstances. By allowing unauthorized exposure of profile information, the vulnerabilities behind this breach caused a grave risk of misuse of these types of data.”

Yet another penalty has been levied against Meta, which continues to accumulate significant fines from EU authorities. This latest fine is not even the largest penalty the company has faced this year, highlighting ongoing scrutiny from regulators.

Just last month, Meta was slapped with a staggering €797.72 million ($US841 million) fine for breaching EU antitrust regulations concerning the integration of Facebook Marketplace with its social media platform, thereby gaining unfair advantages in the marketplace.

Additionally, in the past year, Meta has faced a monumental $US1.3 billion fine from the European Data Protection Board (EDPB) for transferring EU user data to the United States without explicit consent or sufficient protections in place. The company has also incurred a $US414 million penalty for allegedly coercing users into accepting personalized advertisements in its applications. Moreover, it remains under investigation for potential violations of the Digital Services Act (DSA) and Digital Markets Act (DMA).

With a significant outflow of funds from Meta’s coffers into those of EU regulators, it seems prudent for the company to anticipate setting aside around $500 million annually to cover potential fines from EU authorities.

While these fines may seem excessive, they are grounded in the established EU regulations that Meta must comply with in every market it operates. The scale of the penalties reflects the serious nature of the violations, and the cumulative financial impact—over a billion dollars in fines within just a few weeks—will undoubtedly influence Meta’s financial forecasting and earnings reports.

However, it’s worth noting that Meta is projected to generate approximately $160 billion in revenue for the entire year, meaning these fines, while substantial, are unlikely to significantly disrupt the company’s overall financial performance. The sheer magnitude of Meta’s business may also explain why various governments and regulatory bodies are eager to impose hefty fines for perceived violations, as the company has the resources to absorb such costs.

Although these fines may not severely impact Meta’s bottom line, they represent an ongoing challenge that will likely affect the company’s Q4 and full-year financial results. As Meta considers its options for appealing these fines, it will still need to allocate resources to address regulatory concerns effectively.