{"id":7647,"date":"2023-05-23T14:45:17","date_gmt":"2023-05-23T12:45:17","guid":{"rendered":"https:\/\/www.joffeassocies.com\/?p=7647"},"modified":"2024-04-11T15:26:51","modified_gmt":"2024-04-11T13:26:51","slug":"transferts-de-donnees-vers-les-etats-unis-amende-record-de-12-milliard-deuros-pour-meta-ireland","status":"publish","type":"post","link":"https:\/\/www.joffeassocies.com\/en\/transferts-de-donnees-vers-les-etats-unis-amende-record-de-12-milliard-deuros-pour-meta-ireland\/","title":{"rendered":"Data transfers to the United States – Record \u20ac1.2 billion fine for Meta Ireland"},"content":{"rendered":"

Article written byEmilie de Vaucresson<\/a>, Amanda Dubarry<\/a> and Camille Leflour<\/a>.<\/p>\n

 <\/p>\n

On 22 May 2023, the Irish Data Protection Commission (the \u201cDPC\u201d), acting as the lead supervisory authority, announced that it has fined Meta Ireland a record \u20ac1.2 billion for violating Article 46(1) of the GDPR by transferring personal data to the U.S. without implementing the appropriate safeguards.<\/strong><\/p>\n

 <\/p>\n

Since the invalidation of the Privacy Shield, Meta Ireland had been implementing these transfers on the basis of the standard contractual clauses, in conjunction with additional measures that the DPC considered insufficient in light of the risks to the rights and freedoms of data subjects. The data of its European users is indeed stored in the United States, exposing them to potential surveillance by the US authorities.<\/p>\n

 <\/p>\n

The investigation was initially launched in August 2020 as part of a cooperation procedure. The draft decision prepared by the DPC was then submitted to its counterpart regulators in the EU\/EEA, who rejected it and referred it to the European Data Protection Committee (the “EDPS”).<\/p>\n

 <\/p>\n

On the basis of the EDPB\u2019s decision, the DPC adopted the final decision<\/a> under which Meta Ireland is required:<\/p>\n