LinkedIn has been hit with a substantial fine of €310 million (approximately $335 million) by Ireland’s Data Protection Commission (DPC) for privacy violations associated with its tracking ads business.
This sanction marks one of the largest penalties imposed under the General Data Protection Regulation (GDPR) and is LinkedIn’s most significant penalty to date.
The DPC’s investigation revealed multiple breaches of GDPR, particularly concerning the lawfulness, fairness, and transparency of LinkedIn’s data processing practices.
The commission found that LinkedIn’s justifications for processing user data—citing “consent,” “legitimate interests,” and “contractual necessity”—were invalid, leading to serious concerns about the platform’s data handling.
One of the primary issues highlighted was LinkedIn’s lack of transparency regarding how it utilized user data.
The company did not adequately inform users about its data practices, violating GDPR principles that mandate clear communication with users about their data rights.
This fine places LinkedIn among the top ten largest GDPR penalties levied against big tech companies, reflecting the increasing scrutiny on data protection compliance within the industry.
Although Microsoft, LinkedIn’s parent company, had previously set aside funds in anticipation of possible sanctions, the DPC’s ruling underscores the seriousness of the violations.
The case originated from a complaint lodged in France in 2018 by the digital rights non-profit La Quadrature Du Net, which was subsequently forwarded to the DPC.
The investigation, which began in August 2018, took nearly six years to conclude, with the DPC finalizing its decision in July 2024 after consulting with other data protection authorities.
LinkedIn has been given a three-month deadline to bring its European operations into compliance with GDPR requirements.
In response to the ruling, the company stated that it believes it has been compliant with GDPR but is committed to adjusting its advertising practices to adhere to the DPC’s directive.