Skip to main contentMeta Ireland: EU–US data transfers
The DPC found that Meta Ireland’s EU–US transfers infringed Article 46(1), despite standard contractual clauses and supplementary measures. The decision imposed a €1.2 billion fine and transfer-related orders.
Case record
- Irish Data Protection Commission
- GDPR, Article 46(1)
- DPC decision of 12 May 2023
- 12 May 2023
- €1,200,000,000 · Administrative fine in cited decision
- 16 October 2026
What this record establishes
This page describes the cited regulatory action, rather than auditing the organisation’s current systems. A fine or order in the cited decision is not proof of payment or a complete history of later proceedings and appeals.
Checks for your own systems
Inth’s technical interpretation: use this case to choose what evidence to collect in your own implementation. These checks are not instructions issued by the court or regulator.
- Map data storage, support access and processing locations, including remote access.
- Give the privacy team the real recipients, data fields and routes to compare with transfer documents.
- Recheck the assessment when a vendor, region or access arrangement changes.
Sources and limits
Source review: 16 October 2026. This record covers the cited source and procedural stage. It does not audit the organisation’s present implementation or establish every later legal development.