A list of European enforcement action, official legislative (Parliamentary) reports, and cases concerning Facebook with respect to data protection and privacy. This is a work in progress, last updated November 2018.

Data Protection Commissioner (Ireland) v Facebook Ireland Limited, Maximillian Schrems [Case C-311/18]

  • Jurisdiction: European Union, Ireland
  • Status: Case still in progress
  • Authority:  Court of Justice of the European Union
  • Keywords: EU Data Protection Directive (95/46/EC); EU/US Privacy Shield; Fundamental Rights

Information Commissioner’s Office (United Kingdom) v Facebook Ireland Limited [Monetary Penalty Notice]

  • Jurisdiction: United Kingdom
  • Status: Facebook to appeal
  • Date:  £500,000 monetary penalty notice dated 24 October 2018
  • Authority:  Information Commissioner’s Office
  • Keywords: Data Protection Act 1998; Unfair processing of personal data; Failure to take action to protect personal data

Disinformation and ‘fake news’ [Parliamentary Interim Report]

  • Jurisdiction: United Kingdom
  • Date:  24 July 2018
  • Authority:  Digital, Culture, Media and Sport Committee, House of Commons, UK Parliament
  • Keywords: Fake news; Social Media; Russia; EU Referendum; Politics; Democracy; Communications; Disinformation; Propaganda

Brussels Court Declares Facebook Infringe Data Protection Laws, Imposes EUR 250,000 Daily Penalty to End Infringement [(24e k.) Nr. AR/2016/153/A]

  • Jurisdiction: Belgium
  • Date: 16 February 2018
  • Authority:  Nederlandstalige Rechtbank van Eerste Aanleg Brussel (Brussels Court of First Instance)
  • Keywords: Data Protection Directive (95/46/EC); 1992 Belgian Privacy Act; third-party tracking; cookies; informed consent

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v. Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd [Case C‑210/16]

  • Jurisdiction: European Union, Germany
  • Date:  24 October 2017
  • Authority:  Court of Justice of the European Union
  • Keywords: EU Data Protection Directive (95/46/EC); EU/US Privacy Shield; Fundamental Rights; Order to deactivate a fan page on Facebook; Joint liability; Extent of supervisory authorities’ powers to intervene

Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany [Press Release]

  • Jurisdiction: Germany
  • Date:  25 April 2017
  • Authority:  Verwaltungsgericht Hamburg (Administrative Court Hamburg)
  • Keywords: EU Data Protection Directive (95/46/EC); Terms and Conditions; Privacy Policies; Fundamental Rights; Administrative Order prohibiting the sharing of data; consent.

Image © Protest Stencil