Ireland's Privacy Regulator Is Investigating Instagram

Facebook could face a huge privacy fine after the chief European Union (EU)  data watchdog, the Irish Data Protection Commission (DPC), launched a review into how Instagram has exposed the contact details of millions of children. 

The DPC,which is the main data privacy regulator in the EU, has received complaints from individuals and has identified “potential concerns” in relation to the processing of children’s personal data on Instagram.  

The inquiry will also consider whether Facebook has the legal basis to process the data and whether it employs adequate protections and/or restrictions on Instagram.

The purpose of the inquiry is to consider whether Facebook meets its obligations as a data controller with regard to transparency requirements in its provision of Instagram to children.

Instagram’s profile and account settings will be the focus of  a second inquiry, examining whether the social media company is adhering to the regulator’s data protection requirements.

Ireland hosts the European headquarters of a number of US technology firms, making the DPC the EU’s lead regulator under the bloc’s General Data Protection Regulation (GDPR)  regime introduced in 2018. The new rules give regulators the power to impose fines for violations of up to 4 per cent of a company’s global revenue or €20 million, whichever is higher.

All Instagram users can change their personal Instagram accounts to ones designed for businesses, which unlike personal profiles, gives them statistics such as how popular their photos and videos were. But, a business account also means that the user’s personal contact details are publicly displayed on their profile, allowing anybody to contact the children outside of the app.

Until recently, Instagram required all business accounts to show a phone number or email address, so users could not opt out of having their public information displayed. It still allows anybody to set up a business account, with no verification to check if they are actually running a business.

Data Protection Commission:     Irish Times:         Reuters:       Telegraph:       Benzinga

You Might Also Read:

Fact-Checking Comes To Instagram:

Tech Giants Have Facilitated An Online Slavery Market:

 

« Malware Versus Ransomware: What’s the Difference?
Cyber Professionals Fear Being Replaced By AI »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

TNO Cyber Security Lab

TNO Cyber Security Lab

TNO Cyber Security Lab is a dedicated facility for innovative and experimental research with the goal of a safe and resilient cyberspace.

SecurePay

SecurePay

SecurePay is Australia's premier payment gateway, with a range of secure online payment solutions for online retailers, SMEs and enterprise businesses.

Kount

Kount

Kount's “decision engine” platform is ideal for managing fraud in online/telephone channels that process payments and onboard new customers.

ComCode

ComCode

ComCode provides consulting services and solutions in the area of digitization and cyber security for mid-sized and big businesses.

Materna Virtual Solution

Materna Virtual Solution

Materna Virtual Solution security solutions enable user-friendly, secure mobile working environments.

AppViewX

AppViewX

AppViewX is a global leader in the management, automation and orchestration of network services in data centers.

Asvin

Asvin

Asvin provides secure update management and delivery for Internet of Things - IoT Edge devices.

Conviso

Conviso

Conviso is a consulting company specialized in Application Security and Security Research.

RackTop Systems

RackTop Systems

RackTop Systems is the pioneer of CyberConverged data security, a new market that fuses data storage with advanced security and compliance into a single platform.

Upfront Security

Upfront Security

Upfront Security helps companies with innovative products & services to prevent, recognise and recover from (identity) fraud.

Siege Technologies

Siege Technologies

Siege Technologies is a pioneer of multi-purpose cybersecurity products and services that enable customers to leverage both offensive and defensive technologies.

Incognia

Incognia

Incognia have created a ubiquitous private identity based on location behavior, that enables a personalized frictionless experience with mobile apps and connected devices.

Myntex

Myntex

Myntex® builds the future of mobile security. We empower our partners to deliver exclusive mobile endpoint security software, fortifying against mobile threats, device exploits and data exfiltration.

Blink Ops

Blink Ops

Blink helps security teams streamline everyday workflows and protect your organization better.

Karate Labs

Karate Labs

Karate is an open-source unified test automation platform combining API testing, API performance testing, API mocks & UI testing.

Brava

Brava

Brava is your trusted Business Communications and Solutions partner serving the Caribbean and Atlantic region.