The EDPB has ordered Meta to stop processing and transferring data of EU citizens within six months. In December 2022, the European Commission announced the beginning of discussions over a new data transfer framework between the US and EU that will pave the way for “safe trans-Atlantic data flows.” The framework includes clauses like deleting personal data when longer needed for the task it was collected for, limited access to intelligence agencies, and independent redressal mechanism for users.
Meta, on the other hand, hasn’t been a fan of the shrinking scope of SCC in the past and has even threatened that it would be forced to shut down the operation of services such as Instagram in the EU. In its annual report for 2022, Meta said that “if a new transatlantic data transfer framework is not adopted and we are unable to continue to rely on SCCs,” it will have no alternative than winding down Instagram and Facebook in the region.
Meta has until November to comply with erasing or bringing back all the data it has collected since 2020. Meta’s president of global affairs, Nick Clegg, says the decision is “flawed, unjustified and sets a dangerous precedent” for all companies with operations that rely on data transfers between the EU and the US. The company is going to appeal the billion-dollar fine and will also ask the court to stay the deadline for erasing or moving back the data to the EU soil.