Instagram fined €405M over children's data
€405M
≈ $437M at the time
Irish Data Protection Commission
Ireland / EU · 2022
Status: Under appeal
What happened
The DPC found that Instagram business accounts publicly exposed children's phone numbers and email addresses by default.
How it affected users
Minors' contact details were publicly visible, creating real-world safety risks.
Status timeline
Sep 2, 2022
Decision adopted after the EDPB's binding Article 65 decision.
Sep 21, 2026
The DPC's fines register lists the fine as pending appeal; DPC fines are not payable until confirmed by a court.
Sources
- Irish DPC: decision in the Instagram inquiry (€405M)regulator
- Irish DPC fines register: status of each DPC fineregulator
- Proton: Big Tech fines analysisnews
Last verified 2026-10-15. Spotted an error? Report a correction.
Cite this entry
Deepak Gupta, "Instagram fined €405M over children's data," Tech Fines Directory, guptadeepak.com, 2022-09-05. https://guptadeepak.com/tech-fines/violation/meta-ireland-instagram-children-2022/