EDPB asks supervisory authority to carry out investigation into Facebook

Article summary

The European Data Protection Board (EDPB) has adopted an urgent binding decision following a request from the Hamburg supervisory authority (DE-HH SA) after the DE-HH SA adopted provisional measures towards Facebook Ireland on the basis of Article 66(1) of the EU's General Data Protection Regulation, Regulation (EU) 2016/670 (EU GDPR). In response to the request, the EDPB decided that there was insufficient information to conclude infringements by Facebook had taken place or that urgent action was needed. Therefore, no measures needed to be adopted against Facebook Ireland. However, the EDPB believed there was a high likelihood that infringements had occurred and therefore requested the lead supervisory authority in Ireland to conduct further investigations.