[lmkg]

> - The reuters article says "Issue was disclosed voluntarily to the regulator." but the actual source [1] announces a breach of GDPR Article 33(1), for failing to notify.

GDPR mandates the regulator be informed within 72 hours of the breach being discovered.

The official link you provided confirms that Meta informed the regulator voluntarily, in March of 2019. That page also includes a link to Facebook's press release, which says they discovered the issue in January. That's a time lag of around two months, which is around two months longer than the law permits. So yes, failure to follow the law mandating notification.

All things considered this is a small fine. Three orders of magnitude smaller than their usual GDPR fines.