In a nutshell
Swedish company in advertently transfers data of up to a million
people to Meta. Significant fine imposed.
The background
Swedish banking and trading provider, Avanza, was using a
so-called Meta pixel on its website and mobile app. This resulted
in a transfer of information to Meta, which included amongst other
things customer's securities holdings and values, loan amounts,
account numbers and personal identification numbers. When
discovered, Avanza reported this incident to the Swedish Authority
for Privacy Protection (hereinafter "IMY"). However this
was not a one-time occurrence, Avanza had been transferring this
information to Meta for a long period of time due to incorrect
settings. According to Avanza's report, personal data up to one
million individuals were incorrectly transferred to Meta between
November 2019 and June 2021.