In a seminal moment for internationaldataflows, the EU has fined Meta a record-breaking 1.2bn for privacy violations.
The penalty is the largest ever for a violation of GDPR, which was introduced to protect personal information.
But an EU investigation determined that SCCs dont provide enough protection from US surveillance.
It’s free, every week, in your inbox.
The unprecedented fine is a strong signal to organisations that serious infringements have far-reaching consequences.
Meta called the fine unjustified and unnecessary and said it would appeal the ruling.
Data borders
The intervention could prove pivotal for data transfers more broadly.
He called it a dangerous precedent for data transfers that imperils the foundations of an open internet.
He advised all organisations to undertake transfer risk assessments when processing personal data outside of the EU.
In addition, he recommends regular ongoing reviews of compliance and potential risks to data subjects.
Story byThomas Macaulay
Thomas is the managing editor of TNW.
He leads our coverage of European tech and oversees our talented team of writers.
Away from work, he e(show all)Thomas is the managing editor of TNW.
He leads our coverage of European tech and oversees our talented team of writers.
Away from work, he enjoys playing chess (badly) and the guitar (even worse).
