The Irish DPC agreed with Facebook’s legal basis for processing user data (for purposes of performing a contract which its users were party to), which included processing for behavioural advertising purposes and is supported by provisions in its Terms of Service; however, the DPC found that Facebook’s privacy notice was disjointed, incomplete and lacked transparency (potentially misleading users on the processing basis), proposing a fine between €28,000,000 and €36,000,000, and ordering compliance within 3 months.
#dataprivacy #privacy #valueprivacy #GDPR #facebook
EN 
PT