WhatsApp面对第二大在GDPR监管下的罚款2.25亿欧元

发布时间: 2021-09-10

        WhatsApp因违反隐私法规而被爱尔兰数据监管机构罚款 2.25 亿欧元（1.93 亿英镑）。这是爱尔兰数据保护委员会有史以来最大的罚款，也是欧盟GDPR规则中第二高的罚款。

        拥有WhatsApp的Facebook在爱尔兰设有欧盟总部，爱尔兰监管机构是这家欧洲科技巨头的主要监管机构。

        WhatsApp说，它不同意这个决定，以及罚款的严重性，并计划上诉。

        罚款涉及2018年开始的调查，调查内容涉及WhatsApp在如何处理信息方面是否足够透明。所涉及的问题具有高度专业性，包括 WhatsApp 是否向用户提供了足够的信息，说明他们的数据是如何处理的，以及其隐私政策是否足够清晰。此后，这些政策已多次更新。

       “WhatsApp 致力于提供安全和私人服务，公司发言人说，我们努力确保我们提供的信息是透明和全面的，并将继续这样做。我们不同意今天关于我们在 2018 年向人们提供的透明度的决定，而且处罚是完全不成比例的。“

       GDPR 规则允许对违规公司的全球营业额处以高达 4% 的罚款。爱尔兰DPC（Data Protection Commissioner）表示，它已按照GDPR的要求，向其他国家数据机构提交了其决定，"经过长期和全面的调查"，并收到了德国、法国和意大利等8个国家的反对意见。

        一些人不同意爱尔兰监管机构关于哪些具体条款的GDPR被打破或罚款的计算方式等问题。7月下旬，欧洲数据保护委员会要求爱尔兰DPC调整调查结果，"重新评估"其提议的3000万至5000万欧元（合2600万至4300万欧元）的罚款，并"通过规定更高的罚款金额"来修改其决定。

正式谴责：

        隐私活动家马克斯·施雷姆斯说，这"表明DPC仍然功能极其失调"，他欢迎这一决定。他说：“自2018年以来，DPC每年收到约10，000起投诉，这是第一次重大罚款。“

        由于 WhatsApp 计划上诉，在爱尔兰法院系统中，这意味着我们将在实际支付任何罚款之前看到几年。然而，爱尔兰DPC也正式谴责WhatsApp，并命令它"使其处理合规"。只有亚马逊因违反 GDPR 规则而被罚款更多，这也是它积极辩护的案例。

        同时在今年7月，卢森堡监管机构对亚马逊处以7.46亿欧元的罚款，原因是亚马逊称亚马逊不遵守数据处理法。

原文：

 WhatsApp has been fined €225m (£193m) by Ireland's data watchdog for breaching privacy regulations. It is the largest fine ever from the Irish Data Protection Commission, and the second-highest under EU GDPR rules.

Facebook, which owns WhatsApp, has its EU headquarters is in Ireland, and the Irish regulator is the lead authority for the tech giant in Europe.

WhatsApp said it disagrees with the decision, and the severity of the fine, and plans to appeal.

The fine relates to an investigation which began in 2018, about whether WhatsApp had been transparent enough about how it handles information.

The issues involved were highly technical, including whether WhatsApp supplied enough information to users about how their data was processed and if its privacy policies were clear enough.

“Those policies have since been updated several times. WhatsApp is committed to providing a secure and private service," a company spokesperson said.

"We have worked to ensure the information we provide is transparent and comprehensive and will continue to do so. We disagree with the decision today regarding the transparency we provided to people in 2018 and the penalties are entirely disproportionate."

GDPR rules allows for mammoth fines of up to 4% of the offending company's global turnover.

The Irish DPC (Data Protection Commissioner) said it had submitted its decision to other national data authorities, as required under GDPR, "following a lengthy and comprehensive investigation", and received objections from eight countries, including Germany, France, and Italy.

Some disagreed with the Irish regulator about which specific articles of GDPR had been broken or the way the fine had been calculated, among other issues.

And in late July, the European Data Protection Board told the Irish DPC to tweak its finding, "reassess" its proposed fine of €30-50m (£26-43m) and amend its decision "by setting out a higher fine amount".

Formally reprimanded

This "shows how the DPC is still extremely dysfunctional", privacy campaigner Max Schrems said, welcoming the decision.

"The DPC gets about 10,000 complaints per year since 2018 - and this is the first major fine," he said.

And because of WhatsApp's planned appeal, "in the Irish court system, this will mean that we will see years before any fine is actually paid".

The Irish DPC has also formally reprimanded WhatsApp and ordered it to "bring its processing into compliance", however, only Amazon has been fined more for breaking GDPR rules, in a case it is also vigorously defending.

In July, Luxembourg's regulator fined Amazon €746m for what it said was non-compliance with data-processing laws.

本文转载自：BBC www.bbc.com

原文地址：https://www.bbc.com/news/technology-58422465

-