Yazılar

Meta’s Irish Division Penalized $264 Million for Data Breach

Meta Fined $264 Million Over 2018 Data Breach Impacting 29 Million Users

Meta Platforms’ Irish division has been fined €251 million ($264 million or approximately Rs. 2,242 crore) by Ireland’s Data Protection Commission (DPC) following two investigations into a 2018 data breach. The breach reportedly exposed the personal data of 29 million Facebook users globally, including full names, email addresses, phone numbers, timeline posts, and group memberships.

Breach Details and Global Impact

The breach was first reported by Meta Platforms Ireland Limited in September 2018. According to the DPC’s findings, the data of around three million users in the European Union and European Economic Area was compromised. The breach occurred due to unauthorized third-party exploitation of user tokens on Facebook. Meta and its US parent company addressed the issue shortly after it was discovered.

GDPR Violations and Findings

The DPC concluded that Meta violated General Data Protection Regulation (GDPR) rules by failing to adequately document details of the breach and the corrective measures taken. Additionally, Meta was found to have breached GDPR’s requirement to ensure that only data necessary for specific purposes is processed by default.

Meta’s Response and Prior Fines

In a statement, a Meta spokesperson highlighted that the company had taken immediate action to address the breach, notified affected users, and implemented measures to prevent future incidents. Earlier this year, the Irish watchdog fined Meta €91 million ($95.6 million or approximately Rs. 812 crore) over an investigation related to password storage practices.

EU Privacy Regulator Fines Meta 251 Million Euros for 2018 Data Breach

Meta has been fined 251 million euros ($263.5 million) by the Data Protection Commission (DPC), the lead European Union data privacy regulator, for a 2018 security breach that exposed the personal data of 29 million users on Facebook.

Details of the Breach

The breach occurred after cyber attackers exploited a vulnerability in Facebook’s “View As” feature, which allowed users to see how their profile appeared to others. This vulnerability led to the exposure of sensitive personal data, including users’ full names, contact details, location, place of work, date of birth, religion, gender, and in some cases, children’s personal information.

According to Graham Doyle, Deputy Commissioner at the DPC, the breach posed a significant risk for the misuse of this data. Although the breach affected 29 million accounts globally, 3 million of those were in the EU and the European Economic Area (EEA).

Meta’s Response and Penalty

Meta addressed the issue shortly after the breach was discovered and took action to remedy the vulnerability. Despite this, the DPC imposed a fine under the EU’s General Data Protection Regulation (GDPR), which has led to significant penalties for Meta in recent years. To date, Meta has been fined almost 3 billion euros for breaches under GDPR, including a record 1.2 billion euros fine in 2023 related to data privacy violations, which Meta is currently appealing.

Meta’s Appeal

Meta has announced its intention to appeal the fine and reiterated its commitment to protecting users’ privacy. A company spokesperson stated, “We took immediate action to fix the problem as soon as it was identified, and we proactively informed people impacted as well as the Irish Data Protection Commission.”

Broader Context

The DPC oversees the majority of large U.S. internet companies operating in the EU, as these firms have their European operations based in Ireland. This fine marks another chapter in the EU’s ongoing efforts to enforce data protection regulations under the GDPR, which was introduced in 2018 to strengthen privacy rights across the region.

 

Does Chinese Investment Benefit or Harm Ireland?

Chinese investment in Ireland has grown significantly, with the number of Chinese companies operating in the country rising from 25 in 2020 to 40 in 2024. This surge has prompted debates about whether these investments offer opportunities for economic diversification or carry reputational and political risks.

For some, Chinese investment represents a chance for Ireland to reduce its dependence on U.S. tech giants like Apple and Alphabet, creating jobs and potentially making the Irish economy more resilient. Companies such as Huawei and WuXi Biologics have made substantial financial contributions, with Huawei alone generating €800 million annually through its operations in Ireland. Additionally, TikTok’s European headquarters is in Dublin, and Chinese retailer Temu relocated its global headquarters to Ireland in 2023.

However, critics argue that these investments come with strings attached. Chinese companies, including Shein, Huawei, and WuXi, have been linked to human rights abuses, labor issues, and national security concerns. Shein, for instance, has faced allegations of child labor in its supply chain, while Huawei and WuXi have been sanctioned by the U.S. over security concerns. Critics like Irish MEP Barry Andrews have voiced concerns about Chinese companies’ practices, calling for stricter scrutiny and pointing out that human rights violations should not be overlooked.

Another concern is Ireland’s relationship with the U.S. Many of the Chinese firms setting up in Ireland, such as Huawei, are companies that have been sanctioned by the U.S., which could create diplomatic friction. Ireland, while aiming to de-risk rather than decouple from Chinese investments, must balance its close ties to both China and the U.S.

Economists are also divided on the benefits of Chinese investment. While the Irish government promotes its pro-business environment, some argue that Ireland’s economy is already heavily reliant on foreign direct investment (FDI). With unemployment at 4.3%, close to full employment, there is debate over whether Ireland needs additional jobs from Chinese firms. Dan O’Brien, chief economist at Ireland’s Institute of International and European Affairs, suggests that Ireland’s FDI dependence is too high, making the country vulnerable to global economic shifts, particularly if deglobalization trends continue.

Other experts, like Constantin Gurdgiev, emphasize that China’s investments offer Ireland a strategic cushion against potential U.S. pullbacks, especially given the pressure on American companies to re-invest domestically. Gurdgiev also points out that Ireland could act as a neutral ground where U.S. and Chinese firms can operate, giving Dublin a geopolitical edge.

Ireland’s relationship with China is further complicated by its low corporation tax, which has historically attracted foreign investment. However, international pressures have led Ireland to raise its tax rate for large companies. In light of corporate tax reforms and competition from other European nations, China’s investments could serve as a counterbalance if U.S. firms begin to relocate.

Nevertheless, Ireland risks playing a “dangerous geopolitical game” by courting Chinese companies while maintaining its diplomatic closeness with the U.S. While the Irish government insists that Chinese investment is part of a broader strategy to keep the economy competitive, the potential risks—both in terms of human rights and national security—cannot be ignored.