Irish Regulator Fines Meta €528 Million Over Instagram Child Safety Failures

Ireland's Data Protection Commission (DPC) has levied a substantial fine of €528 million against Meta, the parent company of Instagram, for what it describes as failures in protecting children's data on the social media platform. This ruling, announced on Thursday, adds to an earlier penalty of €349 million, bringing the total financial sanction against Meta in this specific case to an unprecedented €877 million.

The investigation, initiated by the DPC, focused on Instagram's handling of the personal data of child users, specifically those between the ages of 13 and 17. Regulators found that the platform allowed these users to set up business accounts, which subsequently made their email addresses and phone numbers publicly accessible. Additionally, concerns were raised about Instagram's 'public by default' setting for new child accounts, meaning minors' profiles were not automatically private, exposing them to potential risks.

This enforcement action underscores the increasing scrutiny faced by major technology companies over their data protection practices, particularly concerning vulnerable user groups. The DPC, as Meta's lead European regulator, has repeatedly imposed significant fines on the company for various data privacy infringements, reflecting a broader European regulatory push to enforce stringent data governance standards, often in direct opposition to the commercial models reliant on extensive data harvesting.