Investigation focused on two ways in which company allegedly breached GDPR rules. The first was Instagram allowing young users, ages 13-17, to set up business accounts on the platform. Instagram also allegedly made the accounts of some young users public by default.

The DPC found that WhatsApp did n’t properly inform EU citizens about how it collected and used their data. There was also a much smaller fine of 17 million euros (about $ 18.6 million) for record-keeping issues.

The company said in a statement to Politico that it updated the public-by-default setting more than a year ago.’adults ca n’t message teens who do n’t follow them,’ said the company.