LinkedIn has been fined 310 million euros by the Data Protection Commission in Ireland for breaching EU data protection laws related to how it handles users’ data. The investigation conducted by the Data Protection Commission focused on the lawfulness and transparency of LinkedIn’s processing of personal data for targeted advertising and behavioural analysis.
The inquiry was initiated by the Data Protection Commission, acting as the primary supervisory authority for LinkedIn, following a complaint lodged with the French Data Protection Authority. The review delved into LinkedIn’s practices of processing personal data for behavioural analysis and targeted advertising directed at users with profiles on the platform.
The decision, delivered by Commissioners for Data Protection Dr Des Hogan and Dale Sunderland on October 22, includes a reprimand, an order for LinkedIn to align its data processing practices with EU regulations, and administrative fines totaling 310 million euros. The Data Protection Commission stressed that personal data processing must be done lawfully, and highlighted that the consent obtained by LinkedIn from users lacked elements of being freely given, sufficiently informed, specific, or unambiguous.
Deputy Commissioner of the Data Protection Commission, Graham Doyle, emphasized the significance of lawfulness in data processing, stating that processing personal data without a proper legal basis constitutes a serious violation of individuals’ right to data protection. LinkedIn, in response to the decision, stated that they are committed to ensuring their advertising practices comply with the Data Protection Commission’s requirements within the given deadline.
The Data Protection Commission plans to release the full decision and additional related information soon. LinkedIn expressed that they believed they were compliant with the General Data Protection Regulation (GDPR) but acknowledged the need to adjust their advertising practices to align with the Data Protection Commission’s decision.
This fine serves as a reminder to companies operating within the EU to handle personal data with transparency and in accordance with data protection laws to protect users’ privacy and rights.
**Insights and Summary:**
The hefty fine imposed on LinkedIn by the Data Protection Commission underscores the importance of compliance with data protection regulations, especially concerning the processing of personal data for targeted advertising. Companies must ensure that user consent is obtained in a clear, specific, and unambiguous manner to uphold individuals’ fundamental right to data protection. This case highlights the vigilance of data protection authorities in enforcing laws to safeguard user privacy in the digital realm.