The Irish Data Protection Authority (DPC) has fined LinkedIn €310 million after concluding that the social network's processing of personal data by its users does not comply with the European Union's General Data Protection Regulation (GDPR).

As expressed in a statement by DPC, the Irish entity began an investigation following a complaint initially filed with the Data Protection Authority of France. In addition to the fine of 310 million euros, the DPC has issued an order for LinkedIn to bring its processing of personal data into line with EU regulations.

In this context, the Irish authority concludes that LinkedIn's processing of personal data was not based on the consent of the social network's users for third parties to process their data to analyze their behavior and be recipients of targeted advertising.

“The consent obtained by LinkedIn was not freely given, sufficiently informed or specific, “ says the agency, adding that ‘the lawfulness of the processing is a fundamental aspect of data protection law and processing without an adequate legal basis constitutes a clear and serious breach of the data subject'sfundamental right to data protection.’

For its part, LinkedIn has indicated that, while it believes it has complied with the General Data Protection Regulation, it is working to ensure that its advertising practices are compliant with the European regulation before the CPD deadline.

This is the sixth significant fine issued for GDPR breaches. The largest was a €1.55 billion penalty imposed on Meta by the Irish DPC in 2023.

TikTok was also fined by the EU 

In 2023, European regulators placed upon TikTok a €345 million fine for failing to protect children's privacy. It was the first time the popular short video-sharing app was punished for breaching Europe's strict data privacy rules.

In this case, Ireland's Data Protection Commission said it was fining TikTok and reprimanding the platform for the violations dating back to the second half of 2020.

The Commission's investigation also found that the default settings posed a risk to children under 13 who had gained access to the platform despite being underage.

In addition, the Commission ruled that a 'family pairing' feature designed for parents to manage settings was not strict enough, allowing adults to turn on direct messaging for users aged 16 and 17 without their consent.

The post LinkedIn gets fined €310 million for breaching the EU - GDPR appeared first on Cross-Border Magazine.

The European Commission (EC) has accused Meta - the company headed by Mark Zuckerberg - of violating the rules established by the Digital Markets Act (DMA) with the "consent or pay" advertising model it imposes on users of its platforms. According to Brussels, this practice forces users to accept the combination of their personal data or to pay a fee to access an ad-free version, which violates EU regulations.

Following regulatory changes introduced by the EU in November last year, Facebook and Instagram's parent company introduced a binary option where the user must either pay or consent. Specifically, Facebook and Instagram users must choose between a monthly subscription without ads on the social networks or the free option in which personalized ads are displayed.

In its preliminary analysis, the Community Executive considered that the consent or pay option in its advertising model does not meet the requirements of European regulations. It pointed out that it does not give users the option to choose a service that uses a smaller amount of personal data than the personalized ads service. In addition, it does not allow users to freely choose whether they want to consent to their personal data being used.

"Our research aims to ensure contestability in markets where gatekeepers such as Meta have been accumulating personal data of millions of EU citizens for many years. Our preliminary view is that Meta's advertising model does not comply with the Digital Markets Act. And we want to empower citizens to take control of their own data and choose a less personalized advertising experience," said Margrethe Vestager, Vice President of the European Commission, in charge of competition policy.

The EU wants Meta to comply with the DMA

Brussels has stated that to ensure compliance with the DMA, users who do not give consent must continue to have access to an equivalent service that uses less personal data, in this case, for the personalization of advertising. The Commission has coordinated with the competent data protection authorities throughout the investigation.

As a result, the EC has warned Meta that it breaches the DMA. Following this preliminary analysis, the company now has the opportunity to exercise its right of defense by examining the documents in the Commission's investigation file and responding in writing to the Commission's preliminary conclusions. The Executive will conclude its investigation within 12 months of the initiation of proceedings on March 25, 2024.

If Brussels concludes that Meta has failed to comply with EU regulations after the 12-month investigation, it may impose fines of 10% of annual worldwide turnover, which may rise to 20% in the case of repeated infringements.

In addition, in case of systemic breaches, the EC can also take additional corrective measures, such as forcing a platform to sell a business or parts of it, or prohibiting it from acquiring additional services related to the sector in which there has been a systemic breach.

"Today, we take another important step towards ensuring Meta's full compliance with the DMA. Our preliminary view is that Meta's 'pay or consent' business model is in breach of the DMA. The DMA is there to give users back the power to decide how their data is used and to ensure that innovative companies can compete on a level playing field with tech giants in accessing data," stressed Thierry Breton, Internal Market Commissioner.

Often, online platforms collect personal data from users for online ad services. Given the technology giant's market position, it can impose conditions on its large user base and collect a large amount of personal data. This gives it a competitive advantage over other social networks that cannot access such a large amount of data and, in turn, raises the standards for advertising services on these platforms.

European regulations state that gatekeepers must seek users' consent to combine their personal data between designated core platform services and other services. If a user refuses such consent, they must have access to a less personalized but equivalent alternative. Online platforms cannot condition the use of the service or certain functionalities on users' consent.

The post The European Commission accused Meta of violating the DMA appeared first on Cross-Border Magazine.

Meta has issued a statement confirming that it will halt plans to train its Artificial Intelligence (AI) systems using user data in the European Union and the United Kingdom. In doing so, the company will follow the measures requested by the Irish Data Protection Commission (DPC) and the UK's Information Commissioner's Office (ICO) to delay training our large language models (LLMs) using public content shared by adults on Facebook and Instagram.

"The DPC welcomes Meta's decision to pause its plans to train its large language model using public content shared by adults on Facebook and Instagram across the EU and EEA," the DPC said in a statement. "This decision followed intense engagement between the DPC and Meta. In cooperation with its EU data protection authorities, the DPC will continue to engage with Meta on this issue."

The tech company has stated that they continue to work with the DPC so that people in Europe can have access "to the same level of AI innovation as the rest of the world" because the company will continue to train its AI with users in other markets such as the U.S. where regulations are not as strict. 

In the statement, it has also clarified that this will cause that "if we don't train our models on the public content that Europeans share on our services and others, such as posts or public comments, then the models and the AI features they power will not accurately understand important regional languages, cultures or hot topics. social media."

The post Meta halts the training if its AI systems in the EU appeared first on Cross-Border Magazine.