LinkedIn hit with $335M fine over data privacy breach
The logo of LinkedIn is seen in this photo taken in Rottweil, Baden-Wurttemberg, Germany, Aug. 24, 2024. (Reuters Photo)


An Irish regulator helping the EU to track data privacy irregularities announced Thursday it had fined professional networking platform LinkedIn 310 million euros ($335 million) over breaching users' personal data for targeted advertising.

The Data Protection Commission (DPC) issued the Microsoft-owned website its first EU fine, saying "the consent obtained by LinkedIn was not given freely."

Targeted advertising provides tailored ads to users based on their personal information.

Regulators around the world, especially the EU, have been trying for years to regulate tech giants when it comes to data protection and other matters, notably unfair competition.

The DPC ordered LinkedIn to bring its processing into compliance with the EU's strict General Data Protection Regulation (GDPR), which was launched in 2018 to protect European consumers from personal data breaches.

"The processing of personal data without an appropriate legal basis is a clear and serious violation of a data subject's fundamental right to data protection," said Graham Doyle, DPC head of communications.

LinkedIn said in a statement Thursday that while it believed it has "been in compliance with" GDPR, the group is "working to ensure" its practices meet the decision.

Tech fines

Ireland is home to the European headquarters of several tech giants, including Microsoft, Apple, Google and Facebook-parent Meta.

In 2018, a French association that defends internet users against digital surveillance by tech giants or states – "La Quadrature du Net" – filed five collective complaints against LinkedIn but also Google, Apple, Facebook and Amazon, accusing them of illegally exploiting the personal data of their users without their consent.

The complaints, which at the time included the names of nearly 12,000 people, were initially filed to CNIL, the French data protection agency, before being transferred to the Irish regulator.

The Irish regulator has brought several big fines against tech companies as the EU seeks to rein in big tech firms over privacy, competition, disinformation and taxation.

In September, it fined Meta 91 million euros ($98.31 million) for failing to put in place appropriate security measures to protect users' password data and for taking too long to alert the regulator of the issue.

It came after the European Commission scored two major legal victories in separate cases that left Apple and Google owing billions of euros.

At the same time, an EU court scrapped a 1.49 billion euro fine imposed by Brussels against Google over abuse of dominance in online advertising.

In the United States, last year, the U.S. Consumer Protection Agency ordered Microsoft to pay $20 million to settle lawsuits for collecting personal data from minors registered on the Xbox console's online gaming platform without informing their parents.