A hand holding a smartphone over a fully clothed person with a troubled expression. The screen shows the persons naked chest.

Social media platforms, while convenient for connecting and sharing, pose certain risks to user data. From data breaches to invasive tracking practices, personal information can easily be exposed or misused. 

Europe’s General Data Protection Regulation (GDPR) was expected to change invasive data collection practices with strict regulation and high fines. However, the huge increase in fines given to top social media platforms for GDPR violations shows that user data protection is still a pressing concern.

A group of naked people in front of a Tube station wearing signs advocating for online privacy and promoting Surfshark VPN.

Surfshark — a company that stands for people 

Amidst growing concerns about the privacy threats social media poses, Surfshark emerges as an advocate for people’s data rights. To bring more exposure to this issue, we launched the Naked People campaign outside the headquarters of leading tech companies in London. Our initiative highlighted the importance of online data security in a world where privacy is too often compromised.

Naked People raises awareness about social media security practices and the exploitation of user data. Our mission is clear: safeguard individuals’ online identities and empower them to regain control of their personal information.

Facebook, Instagram, TikTok and other big platforms — all fined for mishandling user data

Surfshark’s Chart of the Week found that the most common GDPR violation associated with Facebook, TikTok, WhatsApp, and Instagram was non-compliance with general data processing principles. 

Since the GDPR came into force, Facebook has been associated with four fines, which came up to over 1.7 billion euros. TikTok has been linked to three fines totaling over 360 million euros. Instagram and WhatsApp have each been linked to two fines — 585 million euros for Instagram and over 230 million euros for WhatsApp. 

It is worth noting that the total fines imposed on these products and services have increased significantly since 2021. In 2021, the aggregate fines reached 285 million; in 2022, over 670 million; and in 2023 — around 2 billion.

Your data should be protected on social media, says Surfshark

“An analysis of GDPR fines shows that the Media, Telecommunications, and Broadcasting sector is the most heavily fined sector overall. Notably, the top social media companies, which are the largest data collectors, have also received the highest fines,” says Goda Sukackaite, Privacy Counsel at Surfshark. “Such penalties demonstrate the imperative to hold major social media players accountable for their data handling practices, ensuring that the privacy and safety of all users is given the utmost consideration and care.”