Meta was hit with a positive of 265 million euros (roughly $275 million) by the Irish Information Safety Fee, the corporate’s lead regulator for the European Union’s Basic Information Safety Regulation, over an incident final yr during which private knowledge from greater than 530 million Fb customers was uncovered on-line.

The DPC additionally imposed a spread of corrective measures.

The regulator fined Meta $402 million in September for violations of the EU’s privateness legal guidelines defending youngsters on-line, together with the default setting being set to public for customers 13 by way of 17 and letting those that age function enterprise accounts, which reveal their electronic mail addresses and cellphone numbers.

Meta stated in a press release, “Defending the privateness and safety of individuals’s knowledge is key to how our enterprise works. That’s why we now have cooperated totally with the Irish Information Safety Fee on this vital situation. We made adjustments to our techniques through the time in query, together with eradicating the flexibility to scrape our options on this approach utilizing cellphone numbers. Unauthorized knowledge scraping is unacceptable and towards our guidelines, and we are going to proceed working with our friends on this business problem. We’re reviewing this choice fastidiously.”

The DPC stated in a launch that it started its inquiry April 14, 2021, following media experiences on the breach, during which private knowledge together with electronic mail addresses and cell phone numbers for greater than 530 million Fb customers have been uncovered on-line.

Fb stated on the time that the info in query was previous knowledge, and the difficulty had been mounted, including that the info was scraped from its platform by malicious actors utilizing a contact importer function that it had supplied as much as September 2019.

The DPC wrote, “There was a complete inquiry course of, together with cooperation with the entire different knowledge safety supervisory authorities throughout the EU. These supervisory authorities agreed with the choice of the DPC.

Along with the positive, Meta was ordered to “convey its processing into compliance by taking a spread of specified remedial actions inside a selected timeframe.”