Instagram found guilty in teen data case

Ireland’s Data Protection Commission (DPC) imposed a fine of 405 million euros on Instagram for improper processing of personal data relating to child users on its platform.

In September 2020, an inquiry into Meta Platforms Ireland Ltd (Instagram) was initiated by the DPC following examination of the Instagram user registration process. The inquiry examined, in particular, the public disclosure of email addresses and/or phone numbers of children (ages 13 to 17) using the Instagram business account feature and a public-by-default setting for personal Instagram accounts of children.