Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

San Marino: Guarantor fines Facebook €4M for insufficient technical and organisational measures

The Guarantor for the Protection of Personal Data ('Guarantor') announced, on 6 July 2021, that, following an investigation, it had fined the companies Facebook Ireland Ltd. and Facebook Inc. €4 million, as controller and processor respectively, for their violations of Article 33 of Law No. 171 of 21 December 2018, Protection of Individuals with Regard to the Processing of Personal Data. In particular, the Guarantor noted that, fully aware of the risks associated with the extraction of personal data from their platform through the 'scraping technique', Facebook had failed to implement appropriate technical and organisational measures to reduce the risks of unlawful extraction of personal data.

Moreover, the Guarantor also ordered the companies to implement, without delay, technical and organisational measures to ensure an appropriate level of security for the risk of unlawful personal data extraction from their platform and to respond to the authority with feedback within seven days of the date of the order.

You can read the decision, only available in Italian, here.