{"id":6357,"date":"2024-10-07T00:00:00","date_gmt":"2024-10-06T23:00:00","guid":{"rendered":"https:\/\/lawwwing.com\/?p=6357"},"modified":"2025-02-17T13:09:21","modified_gmt":"2025-02-17T12:09:21","slug":"whats-happening-with-meta-privacy-fines-and-more","status":"publish","type":"post","link":"https:\/\/lawwwing.com\/en\/whats-happening-with-meta-privacy-fines-and-more\/","title":{"rendered":"What's happening with Meta? Privacy fines and more"},"content":{"rendered":"\n<p>In 2025, we have compiled some of the fines, ongoing legal proceedings, and other updates to explain in a simple way what is happening with this company that we all use.<\/p>\n\n\n\n<p>emember that Meta Platforms Inc. is the parent company that controls<strong> Facebook, Instagram, WhatsApp, and Messenger<\/strong>, so yes\u2026 this definitely affects you!<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">\u20ac800M Fine for Abuse of Dominant Position<\/h3>\n\n\n\n<p>Last November, Meta was fined \u20ac800 million for <strong>violating competition rules and breaching the EU\u2019s antitrust regulations.<\/strong> This is the largest fine ever imposed on Mark Zuckerberg\u2019s company by the European Commission.<\/p>\n\n\n\n<p>The Commission's investigation has confirmed that Meta <strong>holds a dominant position<\/strong> in the <strong>personal social networking market <\/strong>across the entire European Economic Area (EEA), as well as in <strong>national markets for online advertising on social networks<\/strong>. Specifically, the Commission found that Meta was abusing its dominant positions in violation of Article 102 of the Treaty on the Functioning of the European Union.<\/p>\n\n\n\n<p>Meta was <strong>tying its classified ads service<\/strong>, Facebook Marketplace, to its social network, <strong>Facebook<\/strong>. Additionally, the company was <strong>unilaterally imposing unfair trading conditions<\/strong> on other online classified ad providers that advertise on Meta\u2019s platforms, particularly its most popular social networks, Facebook and Instagram.<\/p>\n\n\n\n<p>The European Commission has also ordered Meta to put an <strong>end to this conduct <\/strong>and to <strong>refrain from repeating the infringement or adopting practices in the future with a similar purpose or effect.<\/strong><\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Other cases<\/h4>\n\n\n\n<p>Meta must minimize its use of personal data<\/p>\n\n\n\n<p>On Friday, <strong>October 4th, 2024<\/strong>, the Court of Justice of the European Union (EUCJ) fully upheld an individual's lawsuit against Meta regarding its Facebook service. The plaintiff claimed that the platform was showing him ads related to his <strong>sexual orientation<\/strong>, even though he had never shared that information with the platform.<\/p>\n\n\n\n<p>The case revolved around whether making personal information public through another channel gives the platform permission to process that data for personalized advertising purposes. The court ruled that the use of <strong>personal data<\/strong> for online advertising must be \"minimized\" and that public data <strong>can only be processed for its originally intended purposes.<\/strong><\/p>\n\n\n\n<p>This ruling means that <strong>Meta can no longer use data collected since 2004 indefinitely for advertising<\/strong>, regardless of user consent. Additionally, the court rejected the idea that public criticism of data management allows the processing of personal information. This decision protects the right to privacy and prevents people from losing data protection simply for speaking publicly about illegal data processing.<\/p>\n\n\n\n<p>Here is a summary of the fines Meta has faced:<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Fines for storing passwords in plain text<\/h4>\n\n\n\n<p>Meta was fined <strong>\u20ac91 million<\/strong> by the <strong>Irish Data Protection Commission (DPC)<\/strong> in October 2024 for <strong>storing certain Facebook user passwords in plain text<\/strong> within its internal systems. (Proper security measures require at least basic cryptographic protection, obviously.)<\/p>\n\n\n\n<p>This incident, which occurred in 2019, represented <strong>another violation<\/strong> of General Data Protection Regulation<strong> (GDPR) rules<\/strong>, specifically <strong>Article 5(1)(f)<\/strong>, which states that personal data must be processed in a manner that <strong>ensures appropriate security. <\/strong>This includes protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.<\/p>\n\n\n\n<p>Graham Doyle, Deputy Commissioner of the DPC, highlighted the seriousness of Meta\u2019s mistake in storing passwords in plain text, emphasizing the <strong>risks of potential misuse<\/strong>. A Meta spokesperson stated that the company took <strong>\"immediate action\"<\/strong> after discovering the error in its password management processes and worked constructively with the DPC throughout the investigation.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Significant previous fines<\/h3>\n\n\n\n<p>Meta has not only received the largest fine for <strong>GDPR<\/strong> violations since its enforcement but also holds the record for the highest number of major fines.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>May 2023<\/strong>: Meta was fined <strong>$1.31 billion<\/strong> for violating <strong>data transfer rules<\/strong> by sending Facebook users' personal data outside the European Union.<\/li>\n\n\n\n<li><strong>January 2023<\/strong>: The company was fined <strong>$426 million<\/strong> for<strong> lacking a valid legal basis<\/strong> to process user data for advertising on Instagram and Facebook.<\/li>\n\n\n\n<li><strong>September 2021<\/strong>: A <strong>$443 million<\/strong> fine was imposed due to <strong>failures in handling minors' data<\/strong> on Instagram.<\/li>\n\n\n\n<li><strong>November 2022<\/strong>: Meta was fined <strong>$290 million<\/strong> by the <strong>DPC<\/strong> for issues related to plain-text password storage. Certain platform features, such as contact importer and search tools, exposed the <strong>personal data of hundreds of millions of users to others.<\/strong><\/li>\n<\/ul>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Meta and AI<\/h4>\n\n\n\n<p>Meta\u2019s controversy regarding <strong>Artificial Intelligence (AI)<\/strong> focused on its intention to process EU\/EEA user data to <strong>train AI models using public content from Facebook and Instagram. <\/strong>This raised concerns about privacy and GDPR compliance, leading an NGO to file 11 complaints with data protection authorities (one of them in Spain!).<\/p>\n\n\n\n<p>In response, the <strong>European Data Protection Board (EDPB)<\/strong> issued several resolutions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>January 23, 2024<\/strong>: The <strong>EDPB urged Meta to pause its data usage for AI.<\/strong><\/li>\n\n\n\n<li><strong>October 4, 2024<\/strong>: Meta <strong>committed not to process EU\/EEA user data for undefined AI techniques<\/strong>, citing European regulatory pressure and the <strong>lack of a clear legal framework<\/strong> that allows this type of processing without <strong>explicit user consent<\/strong>.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Changes in metrics<\/h4>\n\n\n\n<p>Due to all these regulatory changes, Meta has had to <strong>adjust its products to comply with European regulations<\/strong>.<\/p>\n\n\n\n<p>In the past <strong>six months<\/strong>, Meta has modified <strong>Facebook metrics<\/strong>, removing demographic data such as <strong>age and gender<\/strong> for <strong>privacy reasons.<\/strong> It has also focused on indiv<strong>idual post metrics<\/strong>, <strong>limiting historical data to 90 days<\/strong> and excluding certain ads. This impacts total reported clicks and engagement.<\/p>\n\n\n\n<p>To <strong>separate organic and paid engagement<\/strong>, users must now <strong>connect specific advertising accounts<\/strong>. These changes affect analytics platforms like <strong>Sprout Social and Hootsuite<\/strong>, which can no longer access certain <strong>page-level engagement metrics<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In 2025, we have compiled some of the fines, ongoing legal proceedings, and other updates to explain in a simple way what is happening with this company that we all use. emember that Meta Platforms Inc. is the parent company that controls Facebook, Instagram, WhatsApp, and Messenger, so yes\u2026 this definitely affects you! \u20ac800M Fine [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":6738,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"categories":[201,209,210,216,243,338,364,436],"tags":[360,363,371,378,403,427,435],"class_list":["post-6357","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-en","category-gdpr-en","category-data-protection","category-consent","category-online-privacy-en","category-sancion-en","category-2025-3","category-fines","tag-2025-2","tag-cookies","tag-privacy","tag-laws","tag-fines","tag-data-protection","tag-meta-2"],"acf":[],"_links":{"self":[{"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/posts\/6357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/comments?post=6357"}],"version-history":[{"count":7,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/posts\/6357\/revisions"}],"predecessor-version":[{"id":6979,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/posts\/6357\/revisions\/6979"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/media\/6738"}],"wp:attachment":[{"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/media?parent=6357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/categories?post=6357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lawwwing.com\/en\/wp-json\/wp\/v2\/tags?post=6357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}