Meta Platforms Ireland Limited, and Instagram Social Media Network's Investigation by DPC

€405,000,000 in fines


The EDPB fined Meta for the providing lack of processing contact information on children’s business accounts and using ‘public by default’-settings for child users.

Our analysis

The Irish Data Protection Commission (DPC) found that Instagram's default account settings for child users were set to public, meaning that anyone on the app or website, regardless of whether they were registered users or not, could view the contents of the account. This was in violation of Article 12(1) of GDPR because Instagram did not clearly and transparently inform child users of the purpose of public-by-default processing. Although Meta (Instagram's parent company) had informed child users of this setting in their 2018 and 2020 Data Policies, the DPC deemed this insufficient.
The European Data Protection Board (EDPB) agreed with the DPC's assessment that the interests pursued by Instagram were not specific enough, as the controller had mentioned them in vague language. The EDPB also criticized the DPC for not conducting a better evaluation of the existence of the legitimate interest(s) pursued by Instagram. Furthermore, Instagram failed to provide child users with information on the purposes of processing and the categories of recipients of personal data using clear and plain language, which was required under Articles 13(1)(c) and (e) of GDPR.


Following the adoption of a binding decision by the European Data Protection Board (EDPB), the Irish Data Protection Commission (DPC) fined Meta €405,000,000 for processing contact information on children's business accounts without legal grounds and for having default settings set to "public" for child users.


Meta Platforms Ireland Limited, and Instagram Social Media Network and DPC through European Data Protection Board

Case number


Related deceptive patterns

Related laws

Legal enforcement database by Leiser, Santos and Doshi

The information about laws and cases on this website is brought to you by the Leiser, Santos and Doshi enforcement database.

About us