Ireland fined Instagram €405 million for violating children’s privacy

The Irish regulator fined Instagram 405 million euros for violating the EU's General Data Protection Regulation

Reuters and Politico report.

As noted in the publication, the social network was fined after an investigation into the processing of children's data.

The investigation began in 2020 and focused on Instagram users between the ages of 13 and 17 who were allowed to manage business accounts. It facilitated the publication of their telephone numbers and/or email addresses.

Thus, based on the investigation results, the Irish regulator decided to fine Instagram 405 million euros.

It is a record for Meta, which also owns Facebook and WhatsApp.

Before that, there were fines:

• in the amount of 225 million euros for WhatsApp,
• in the amount of 17 million euros for Facebook.

In total, the regulator is preparing at least six other investigations into companies owned by Meta.

Instagram representatives, however, disagree with the decision and plan to appeal the fine. Meta said the request was related to old settings that they updated over a year ago.

"This inquiry focused on old settings that we updated over a year ago, and we've since released many new features to help keep teens safe and their information private," a Meta spokesperson said.

"Anyone under 18 automatically has their account set to private when they join Instagram, so only people they know can see what they post, and adults can't message teens who don't follow them. We engaged fully with the DPC throughout their inquiry, and we're carefully reviewing their final decision," Meta stated.

Ireland's fine is the second-largest GDPR fine after the €746m fine against Amazon and the third for the Meta-owned company to be handed over by the Irish regulator.