The AEPD has imposed a fine of € 1,200,000 on Facebook for infringing three points of the LOPD
The Spanish Data Protection Agency ( AEPD ) accuses the social network of committing three serious infringements of the Organic Law on Data Protection ( LOPD ). This resolution follows a previous investigation in which the AEPD has verified that the company Facebook collects data on the users without their consent and without informing them properly on what types of data will be used and for what ends. In addition, the Agency uses the social network not to delete these personal data when they are no longer useful for the purpose for which they were collected and even when the user has deleted his account. These three infringements have led the AEPD to impose a penalty of EUR 1,200,000, 600,000 euros for one of the infractions typified as very serious and 300,000 euros for the other two infringements.
The social network with more than 2 billion users per month, according to March data, collects personal data of each user on ideology, sex, religion, personal tastes or navigation without previously informing about the use and the purpose that will be given to this data. This information is usually collected for the purpose of advertising or secret use for the company, but without the express consent of the users, which is considered an infraction typified as very serious in the LOPD.
Finally, the third violation indicates that Facebook does not delete the information collected . The data is retained and reused, even when the user has deleted his account in the social network and requested the deletion of information related to it. In this case, Facebook retains and continues to use the information for 17 more months through a cookie from the deleted account.
Other sanctions in Europe