EU Court Fines European Commission for Violating Its Own Data Privacy Rules

The European Commission must pay €400 to a German citizen after improperly transferring personal data to the U.S., marking a first in GDPR enforcement.

• The EU General Court ruled that the European Commission committed a 'sufficiently serious breach' of GDPR, Europe's strict data protection law.
• The case involved the transfer of a German citizen's IP address and other data to U.S. companies Meta and Amazon without adequate safeguards.
• The citizen had used the 'Sign in with Facebook' option on an EU conference registration website, triggering the data transfer.
• The €400 fine represents the first time the European Commission itself has been penalized for violating GDPR regulations.
• GDPR, regarded as one of the world's toughest privacy laws, has previously imposed significant fines on major corporations like Meta and LinkedIn.

4 Articles

Gizmodo TechCrunch Der Tagesspiegel