Precedent corpus / DPC (Ireland)
Meta Platforms Ireland Limited
DPC (Ireland) case IN-20-8-1, decided . EUR 1200M.
We have not checked whether this decision was appealed. This is not a statement that no appeal exists.
No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.
What the regulator decided
Meta Ireland's transfers of Facebook user personal data from the EU/EEA to the United States, made on the basis of updated Standard Contractual Clauses, did not address the risks identified by the Court of Justice in Schrems II and so breached Article 46(1) GDPR; the DPC ordered suspension of future transfers and a six-month deadline to cease unlawful processing and storage in the US.
Primary source
Regulator-owned URL. Quote this in legal briefs and academic citations.
https://www.dataprotection.ie/sites/default/files/uploads/2023-06/12.05.2023%20Decision%20IN-20-8-1%20Meta%20Platform%20Ireland%20Limited%20%28Facebook%29%20data%20transfers.pdfArchived snapshot
Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.
https://web.archive.org/web/20250918030541/https://www.dataprotection.ie/sites/default/files/uploads/2023-06/12.05.2023%20Decision%20IN-20-8-1%20Meta%20Platform%20Ireland%20Limited%20%28Facebook%29%20data%20transfers.pdfConsentMark interpretation
Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.
Decision followed EDPB Binding Decision 1/2023 (Art. 65) on dispute resolution. Cite when the scan shows US-hosted analytics or ad-tech processing EU personal data without a working Article 46 transfer mechanism - the underlying problem is the SCC inadequacy, not the cookie banner.
Verification trail
Checked against the primary source on 26th May 2026. Next review 26th November 2026.
Cite this case
@misc{consentmark-precedent-dpc-in-20-8-1,
author = {{ConsentMark}},
year = {2023},
title = {DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited},
howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-20-8-1}},
note = {ConsentMark methodology v7.8.1}
}ConsentMark. (2023, May 12). DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited. Methodology v7.8.1. https://www.consentmark.com/precedent/dpc-in-20-8-1[DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited - ConsentMark](https://www.consentmark.com/precedent/dpc-in-20-8-1)DPC (Ireland) IN-20-8-1 - Meta Platforms Ireland Limited - ConsentMark, 2023-05-12, methodology v7.8.1, https://www.consentmark.com/precedent/dpc-in-20-8-1