South Korea Fines Meta $15 Million For Illegally Collecting User Data.
South Korea’s Personal Information Protection Commission has imposed a significant fine of 21.6 billion won (approximately $15 million) on Meta, the parent company of Facebook, for the illegal collection of sensitive personal information from its users.
This ruling, announced on November 5, 2024, follows a comprehensive four-year investigation that revealed Meta’s unlawful practices in handling user data, particularly concerning political views and sexual orientation.
Overview of the Investigation
The investigation concluded that Meta had collected sensitive information from around 980,000 South Korean Facebook users between July 2018 and March 2022. The types of data gathered included users’ religious beliefs, political opinions, and details about their same-sex relationships. This sensitive information was then shared with approximately 4,000 advertisers, violating South Korea’s stringent privacy laws that require explicit consent for processing such data.
Key Findings
- Data Collection Methods: Meta reportedly analyzed users’ interactions on the platform, specifically, the pages they liked and the advertisements they clicked, to categorize them based on sensitive themes like religion and LGBTQ+ issues.
- Lack of Consent: The commission emphasized that Meta’s data policy provided only vague references to how this sensitive information would be used, failing to secure specific consent from users.
- Security Failures: The commission also highlighted Meta’s inadequate security measures, which allowed hackers to exploit inactive accounts to forge identities and request password resets for other users. This breach affected at least 10 South Korean Facebook users.
Context of the Fine
This fine is part of a broader trend of increased scrutiny over Meta’s data practices in South Korea. The country has previously imposed hefty penalties on both Meta and Google for similar violations. In 2022, a combined fine of 100 billion won (around $72 million) was levied against both companies for tracking online behavior without user consent. Furthermore, in 2020, Meta faced a fine of 6.7 billion won ($4.8 million) for sharing personal information with third parties without consent.
Meta’s South Korean office has stated that it will “carefully review” the commission’s decision but has not provided further comments at this time.
Implications for User Privacy
This ruling underscores the growing concerns regarding user privacy and data protection in the digital age. As governments worldwide tighten regulations around data privacy, companies like Meta are facing increasing pressure to ensure compliance with local laws. The South Korean case serves as a reminder of the importance of obtaining clear consent from users before collecting and utilizing their personal information.