Hacker News new | ask | show | jobs
by matsemann 1119 days ago
> “It took us ten years of litigation against the Irish DPC to get to this result. We had to bring three procedures against the DPC and risked millions of procedural costs. The Irish regulator has done everything to avoid this decision, but was consistently overturned by the European Courts and institutions. It is kind of absurd that the record fine will go to Ireland - the EU Member State that did everything to ensure that this fine is not issued."

Kinda crazy how Irish regulators did everything in their power to avoid this outcome. But I guess that's why Meta and other big players are situated in Ireland, they rely on them not enforcing stuff and some meager taxes.

2 comments

How often do you see a state-employee doing "everything in their power"? Did they have any special incentives?
Doing everything in their power here is to do nothing, so that's quite easy. My guess is push from above to be as lax as possible, so that companies choose to stay in Ireland vs other EU countries. Or the funding to the data protection agency is intentionally nerfed to keep them from being able to actually do anything.
Wait. 10 years?

So $120m/year fine?

That’s a rounding error

The decision goes further than a fine, though. It orders Meta to stop transferring personal data of people in the EU to the US.
How is this actually supposed to work in practice, other than sharding EU and non-EU customers and having them unable to communicate across the shards?
Meta’s chock full of very smart, highly paid people. I’m sure they’ll figure something out.
Why unable to communicate? Is there any reason why the relevant non-EU customer data cannot be stored within the EU as well?
If someone in the US visits a profile page of someone in the EU, that necessitates a transfer of data outside of the EU.

Perhaps that's an extreme and pedantic example though.

Confidential Cloud computing is the answer and hyperscalers work on that. You literally put your data in a black box.
Note that in the last 5 years (since GDPR came in), Facebook has also been fined €405m, €390m, €265m and €225m on other occasions: https://www.politico.eu/article/eu-hits-meta-with-record-e1-...
Facebook has made approximately 20 billion in profit yearly for the last 5 years. They don't break down profit by country, but EU represents a small portion of users. About 10% overall. Speculating that overall profits are 2billion from EU means that the fine represents about 5% of profits.

Not that bad