The fine is a result of an investigation into LinkedIn’s tracking practices, which were found to be in violation of the EU’s General Data Protection Regulation (GDPR).

Background

LinkedIn, the professional networking site, has been a cornerstone of the online job market for over two decades.

However, the court ruled that LinkedIn’s data processing practices were not justified under any of these grounds.

The Case of LinkedIn and the General Data Protection Regulation (GDPR)

In 2019, the European Court of Justice (ECJ) delivered a landmark ruling in the case of LinkedIn, a social media platform, and the General Data Protection Regulation (GDPR). The GDPR, a comprehensive data protection law, came into effect in May 2018, and it imposed stringent requirements on companies to protect individuals’ personal data.

The Legal Bases for Data Processing

LinkedIn had sought to claim that its data processing practices were justified under three different legal bases: consent, legitimate interests, and contractual necessity. However, the court ruled that LinkedIn’s practices were not justified under any of these grounds. * Consent: LinkedIn had obtained users’ consent to process their data for targeted advertising.

The Background

LinkedIn has been a leading platform for professionals to connect, network, and find job opportunities. With over 700 million users worldwide, it has become an indispensable tool for career development and personal branding.

Background

The Irish Data Protection Commission (IDPC) is an independent body that oversees the implementation of the General Data Protection Regulation (GDPR) in Ireland. The GDPR is a comprehensive data protection law that applies to all EU member states, and it sets out strict rules for the collection, storage, and use of personal data. In 2018, LinkedIn faced a number of claims from users who alleged that the company had breached the GDPR in its digital advertising efforts. These claims centered on the use of personal data for targeted advertising, without users’ explicit consent.

The Decision

After conducting an investigation, the IDPC reached a final decision on the claims, finding that LinkedIn had indeed breached the GDPR in several areas. The commission imposed a fine of €1.1 million on LinkedIn, which is approximately $1.2 million USD. In addition to the fine, the IDPC also ordered LinkedIn to bring its European operations into compliance with the GDPR within three months.

This report was updated with a correction to the currency conversion of the DPC fine.