Meta Inc is known to flout subject access request under the GDPR and numerous complaints have been lodged. What is the timeframe for these processes to play out?
How does Facebook justify non-compliance with GDPR subject access requests?
3
-
1I don't know enough to offer an answer, but these from the ICO may be of some use to others: An organisation normally has to respond to your request within one month and What to do if the organisation does not respond– user35069Commented Jul 28, 2023 at 12:18
-
As noted in my comment to the linked question, the Irish DPC tends to be an enforcement bottleneck. The most high-profile enforcement case against Facebook/Meta was Max Schrem's complaint regarding unlawful data transfers, filed the day GDPR came into force in May 2018. The DPC had to be sued to do its job, with appeals up to the CJEU. This took over two years. Once the CJEU had found that the data transfers had been illegal, the EDPB had to overrule the DPC to actually draw consequences, like imposing fines. All of this took around five years, and the matter still isn't completely settled.– amonCommented Jul 30, 2023 at 9:41
-
@amon do you know where one can read about the progress of these matters?– TylerDurdenCommented Jul 30, 2023 at 10:45
Add a comment
|