Brave, with two co-plaintiffs, file GDPR complaints in UK and Ireland against Google and “others”, seeking probe into behavioral ad practices exposing user data
COLOGNE, Germany (Reuters) - Brave, a privacy-focused web browser set up by Silicon Valley engineering guru Brendan Eich …
Context & Ripple Effects
This filing is the opening move in what becomes a multi-year, multi-front campaign against Google's ad-data practices. It follows the UK consumer-group suit alleging an algorithm tricked Safari into releasing personal data — the same playbook of private actors forcing scrutiny where regulators had not yet acted.
Brave, founded by Brendan Eich as a privacy-first browser, has both the technical standing to document ad-tech data flows and a commercial stake in the outcome. The strategy pays off later: in 2019 Brave hands the Irish regulator direct evidence that hidden webpages pass user personal data to advertisers, and Max Schrems' Noyb runs the same complaint mechanism against Google's Android Advertising ID in France.
First-order effects
- UK and Irish data protection authorities must now decide whether to open formal investigations into behavioral advertising's data exposures — the complaints are designed to force a probe, not just register a grievance.
- Google, already defending the Safari-related litigation in the UK, now faces parallel GDPR proceedings in two jurisdictions at once, with 'others' unnamed in the filing exposed alongside it.
Second-order effects
- Other ad-tech intermediaries in the behavioral-ad supply chain become targets by association: if the regulators accept the complaint framing, any player moving personal data through these auctions faces the same theory of violation.
- Small privacy players learn that regulator complaints are cheaper and faster than class actions, shifting competitive pressure from product features alone to litigation-and-enforcement campaigns — a template Noyb immediately reuses.
Third-order effects
- If the pattern holds, GDPR enforcement of behavioral advertising becomes complaint-driven rather than regulator-initiated, with browsers and activist non-profits acting as de facto prosecutors supplying the technical evidence agencies lack.
- The cumulative record — the Safari suit, Brave's 2019 evidence dossier, Noyb's Ad ID complaints — builds toward structural pressure on real-time-bidding-style data sharing across EU markets, regardless of how any single case resolves.
The trend: Privacy-focused browsers and activist groups are converting GDPR's complaint mechanism into a standing enforcement channel against behavioral advertising's data flows.