Meta Platforms Ireland Limited

DPC (Ireland) case IN-20-8-1, decided 2023-05-12. EUR 1,200,000,000.

What the regulator decided

Meta Ireland's transfers of Facebook user personal data from the EU/EEA to the United States, made on the basis of updated Standard Contractual Clauses, did not address the risks identified by the Court of Justice in Schrems II and so breached Article 46(1) GDPR; the DPC ordered suspension of future transfers and a six-month deadline to cease unlawful processing and storage in the US.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.dataprotection.ie/sites/default/files/uploads/2023-06/12.05.2023%20Decision%20IN-20-8-1%20Meta%20Platform%20Ireland%20Limited%20%28Facebook%29%20data%20transfers.pdf

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20250918030541/https://www.dataprotection.ie/sites/default/files/uploads/2023-06/12.05.2023%20Decision%20IN-20-8-1%20Meta%20Platform%20Ireland%20Limited%20%28Facebook%29%20data%20transfers.pdf

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Decision followed EDPB Binding Decision 1/2023 (Art. 65) on dispute resolution. Largest GDPR fine on record at time of adoption. Cite when the scan shows US-hosted analytics or ad-tech processing EU personal data without a working Article 46 transfer mechanism - the underlying problem is the SCC inadequacy, not the cookie banner.

Verification trail

Verified by: donal
Verified at: 2026-05-26
Review due: 2026-11-26

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-dpc-in-20-8-1,
  author       = {{ConsentMark}},
  year         = {2023},
  title        = {DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited},
  howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-20-8-1}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2023, May 12). DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited. Methodology v1.3. https://www.consentmark.com/precedent/dpc-in-20-8-1

Markdown

[DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited - ConsentMark](https://www.consentmark.com/precedent/dpc-in-20-8-1)

Plain text

DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited - ConsentMark, 2023-05-12, methodology v1.3, https://www.consentmark.com/precedent/dpc-in-20-8-1