Facebook has been fined 110 million by the European Commission for "misleading information" during an investigation into its acquisition of WhatsApp - its second European fine in as many days.
Back in 2014, Facebook bought the messaging service, prompting the EC to investigate whether the deal should be allowed, which it eventually approved.
At the time, Facebook repeatedly told the EC that it would not be able to automatically link Facebook users' accounts with their WhatsApp profiles. Two years later, however, Facebook updated its terms of service and privacy policy suggesting it was indeed popssible to do so.
The EC questioned whether that had always been the plan and investigated. "The Commission has found that, contrary to Facebook's statements in the 2014 merger review process, the technical possibility of automatically matching Facebook and WhatsApp users' identities already existed in 2014, and that Facebook staff were aware of such a possibility," the commission said in a statement.
"Today's decision sends a clear signal to companies that they must comply with all aspects of EU merger rules, including the obligation to provide correct information. And it imposes a proportionate and deterrent fine on Facebook," said Commissioner Margrethe Vestager, in charge of competition policy. "The Commission must be able to take decisions about mergers' effects on competition in full knowledge of accurate facts."
The EC noted that the decision doesn't impact the approval of the WhatsApp acquisition, saying even if Facebook had admitted user matching was possible, it wouldn't have halted the deal. However, it noted the fine was the first for provision of incorrect or misleading facts since new rules came into play in 2004. The fine also isn't related to any looming data protection challenges.
The Commission said it can fine up to 1% of the aggregated turnover of a company - the 110 million charge is less than half of the maximum. It comes a day after French data authorities slapped Facebook with a 150,000 fine for tracking users without consent.
-
Bigger salaries, more burnout: Is the CISO role in crisis?In-depth CISOs are more stressed than ever before – but why is this and what can be done?
-
Cheap cyber crime kits can be bought on the dark web for less than $25News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
-
Forcing Apple to allow alternative app stores might cause major security risksAnalysis Apple will be forced to allow third-party marketplaces on its devices, but some experts have raised serious security concerns
-
Why bolstering your security capabilities is critical ahead of NIS2NIS2 regulations will bolster cyber resilience in key industries as well as improving multi-agency responses to data breaches
-
New EU vulnerability disclosure rules deemed an "unnecessary risk"News The vulnerability disclosure rules in the Cyber Resilience Act could also cause a “chilling effect” on security researchers
-
Are you ready for NIS2?WEBINAR Find out what you should be doing to prepare for the EU’s latest data protection regulation and UK equivalent with our free webinar
-
EU regulators are digging their heels in despite big tech’s Data Act pushbackAnalysis EU regulators are no strangers to big tech regulatory push back, so why do companies still persist?
-
Latest Meta GDPR fine brings 12-month total to more than €1 billionNews Meta was issued with two hefty GDPR fines for “forcing” users to consent to data processing
-
Microsoft's EU Data Boundary will begin staggered rollout in January 2023News Public sector and commercial customers will be the first to benefit when the rollout begins on 1 January across all of Microsoft's core services
-
"Unacceptable" data scraping lands Meta a £228m data protection fineNews The much-awaited decision follows the scraping of half a billion users' data and received unanimous approval from EU regulators
