South Korea fines Meta for illegal collection of user data

(FILES) This picture taken on March 25, 2024, shows the Meta logo on a smartphone in Mulhouse, eastern France. Meta on Wednesday reported profit of $13.5 billion in the recently ended quarter, beating market expectations and causing the share price to jump. Meta, the parent company of Facebook and Instagram, said revenue in the quarter was $39 billion, some 22 percent higher than the same period a year earlier. (Photo by SEBASTIEN BOZON / AFP)

Seoul, South Korea — South Korea has fined Facebook-parent Meta more than $15 million for illegally collecting sensitive user information from nearly a million people without consent and sharing it with advertisers, the country’s data watchdog said Tuesday.

The firm, which also owns Instagram, ran afoul of laws prohibiting the use of information on political opinions, religious beliefs and people’s sex life unless the individual provides explicit consent, Seoul’s Personal Information Protection Commission added.

It added that the tech giant collected sensitive information from around 980,000 domestic users in South Korea through their Facebook profiles.

READ: Meta’s third-quarter profit surges 35% reflecting strong ad revenue

This included details about their religious beliefs and whether they are in a same-sex relationship.

The watchdog said it had confirmed that such information was provided to advertisers by Meta, with around 4,000 advertisers using it.

Meta “analyzed user behavior data, including pages liked and ads clicked on Facebook”, to create and implement targeted advertising related to “sensitive themes” such as transgender issues, homosexuality and North Korean defectors, officials said.

The commission said Tuesday it had decided to fine Meta 21.6 billion won ($15.6 million).

It added that it “also ordered the company to establish legal grounds for processing sensitive information, implement safety measures, and respond diligently to users’ requests for access to their personal data”.

The decision is “significant in that they ensure that foreign operators providing global services must comply with the obligations set forth in (South Korea’s) Protection Act regarding the processing of sensitive information”.