Enforcement notice in the matter of Meta Platforms Ireland Limited made pursuant to Sections 133(9) and 133(10) of the Data Protection Act, 2018 and Articles 60 and 66 of the General Data Protection Regulation

View all Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

7 December 2023

Ireland

Decision Type

Enforcement notice in the matter of Meta Platforms Ireland Limited made pursuant to Sections 133(9) and 133(10) of the Data Protection Act, 2018 and Articles 60 and 66 of the General Data Protection Regulation 1.5MB

Download

Opinion / Binding decision References

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Participation of Access Now in the 11th meeting of the Coordinated Supervision Committee

3 July 2024

CSC Letters

Participation of the European Digital Rights in the 11th meeting of the Coordinated Supervision Committee

3 July 2024

CSC Letters

AI Auditing

27 June 2024

Support Pool of Experts projects

The AI Auditing project aims to map, develop and pilot tools that help evaluate the GDPR compliance of AI systems and applications are GDPR compliant.

The EDPB launched this project in the framework of the Support Pool of Experts programme, at the initiative of the Spanish Data Protection Authority (DPA).

Project completed by the external expert Dr. Gemma Galdon Clavell in February 2023.

Objective

This project helps all parties understand and assess data protection safeguards in the context of the AI Act. In particular, it may help DPAs to inspect AI systems by defining a methodology in the form of a check-list to perform an audit of an algorithm and proposing tools that would enhance transparency.

This project includes several deliverables:

Data Protection Officer training

27 June 2024

Support Pool of Experts projects

Under the Data Protection Officer (DPO) training project, data protection officers in Croatia were trained with the aim to raise the overall level of compliance of their organisations, especially in hospitals and educational institutions.

The EDPB launched the Data Protection Officer training project in the context of the Support Pool of Experts programme, at the request of the Croatian Data Protection Authority (DPA).

Project conducted by external expert Prof. Tihomir Katulić and completed in December 2023

The DPO training extensive programme was designed in Croatian with training material and Q&As for DPOs, it includes several deliverables:

AI Risks: Optical Character Recognition and Named Entity Recognition

27 June 2024

Support Pool of Experts projects

The AI risks project assesses the data protection risks of AI for Optical Character Recognition (OCR) and Named Entity Recognition (NER).

OCR is a technology used to convert images or scanned documents containing text into machine-readable text.
NER is used to identify named entities such as names, organizations and locations within a document and classify them into predefined categories.

The EDPB launched this project in the context of the Support Pool of Experts programme at the request of the EDPS.

Project completed by the external expert Isabel Barbera in September 2023.

Objective

This project helps data controllers who use AI for these purposes to perform an assessment of data protection risks and, data protection authorities to evaluate the validity and effectiveness of this assessment in the course of their investigations.
For both technologies, the external expert identified specific data protection and privacy risks posed by the procurement, the development and the use of the specific technology.

The AI Risks project includes several deliverables: