LinkedIn Fined $334 Million by EU for GDPR Violations

LinkedIn must also demonstrate its compliance going forward.

LinkedIn Hit with Hefty GDPR Fine

Professional networking giant LinkedIn is currently facing a tough challenge after being fined €310 million ($334 million) by the European Union for improperly using member data for targeted advertising. The Irish Data Protection Commission (DPC) issued the fine.

Data Protection Rules Breached

The DPC found that LinkedIn violated the General Data Protection Regulation (GDPR) by not obtaining proper consent and failing to demonstrate a legitimate interest or contractual necessity for processing the data it collected directly and through third parties. “The legality of processing is a fundamental aspect of the right to data protection, and processing personal data without a proper legal basis is a clear and serious violation of an individual’s fundamental rights,” stated DPC Deputy Commissioner Graham Doyle.

Complaint Initiated by a French Organization

The ruling follows a complaint made in 2018 by the French NGO, La Quadrature Du Net, which initially approached the French Data Protection Authority before it was transferred to the DPC since LinkedIn’s European headquarters are based in Ireland.

Strict Guidelines for the Future

Alongside the fine, LinkedIn has also been ordered by the DPC to ensure all data collection complies with regulations moving forward. This case underscores the critical importance of adhering to data protection laws for all digital entities, including tech giants.