Ireland: DPC submits draft decision on inquiry into Meta
The Data Protection Commission ('DPC') announced, on 3 October 2022, that it had submitted, on 30 September 2022, a draft decision in a large scale inquiry into Meta Platforms Ireland Limited to other supervisory authorities across the EU. In particular, the DPC highlighted that the inquiry was commenced in April 2021 after media reports highlighted that a collated dataset of Facebook users' personal data had been made available on the internet. More specifically, the DPC outlined that the inquiry concerned the question of Meta's compliance with its obligations of Data Protection by Design and by Default under Articles 25(1) and 25(2) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR').
In this regard, the DPC Deputy Commissioner, Graham Doyle, stated that the dataset in question included personal data of approximately 533 million Facebook users worldwide. Moreover, Doyle noted that the draft decision "is part of the process under Article 60 of the GDPR, where the DPC sends draft decisions to other Concerned Supervisory Authorities and they have one month to review its draft decision and raise any 'relevant and reasoned objections' that they may have".
You can read the announcement here.