Instagram had allowed users aged between 13 and 17 to operate business accounts on the platform, which showed the users’ phone numbers and email addresses. The DPC also found the platform had operated a user registration system whereby the accounts of 13-to-17-year-old users were set to ‘public’ by default.
Source: The Guardian, September 5, 2022, “Instagram owner Meta fined €405m over handling of teens’ data“