Regulator announcement; this article does not establish payment or the outcome of any subsequent appeal.
What happened
The Irish DPC announced a €310 million fine against LinkedIn Ireland in October 2024. The inquiry examined behavioural analysis and targeted advertising involving members’ personal information. The authority’s findings concerned lawfulness, fairness and transparency, and included an order to bring processing into compliance.
Source: Irish DPC — original source ↗
What it means for your website
Adding a sentence about marketing to a privacy policy does not answer every question about how advertising data is collected and used. Start by identifying the tools, purposes and choices in your own setup. A social-media pixel, an uploaded customer audience and a newsletter list involve different flows. Avoid treating all three as one generic marketing permission. Ask your marketing team to explain what is uploaded, what is collected automatically and which provider receives it. Then check that your technical controls and public information match those choices. The appropriate legal basis needs assessment in context; a scanner cannot choose it for your organisation.
Three useful next steps
- List the advertising tools and audience uploads you use.
- Separate their purposes and data sources.
- Review the controls and explanations for each activity.
Sources & context
Official sources consulted on 1 October 2026. A regulator’s announcement records its findings at that time; it is not proof of payment or the outcome of every later appeal.
Irish DPC — original sourceOur practical suggestions are GDPRFix commentary. A public website scan cannot establish your full legal position. For advice on a specific obligation or enforcement matter, use a suitably qualified adviser.