Ireland's Data Protection Commission has opened a statutory inquiry into Facebook and Instagram.
It's after the company admitted it stored millions of user's passwords in a readable format.
The inquiry will check if the social media sites broke GDPR rules.
Data Protection Commission opens statutory inquiry into Facebook https://t.co/m8v2VOEUzh pic.twitter.com/w6cz4M2b1l
— Data Protection Commission Ireland (@DPCIreland) April 25, 2019
Back in March, Facebook revealed millions of its users had their passwords stored in a readable format.
They were held on the company's internal servers.
Facebook said it had no evidence that any of the passwords had been abused internally.