Ireland's Data Protection Commission, the lead EU supervisory authority for Google, announces investigation into Google's online advertising data collection
KEY POINTS — Ireland's Data Protection Commission says its probe will examine whether Google's processing of data in advertising transactions breaches EU privacy rules.
Context & Ripple Effects
This probe makes Ireland's Data Protection Commission the first mover against Google's core ad machine under GDPR. The DPC had already cut its teeth on US platforms with its probe into Facebook's 2018 data breach, and as lead supervisory authority for companies headquartered in Ireland it carries the one-stop-shop burden for Google across the EU.
The story compounds fast: seven months later Brussels opened [[a:948398|preliminary antitrust investigations into how Google and Facebook gather and monetize ad data]], and in early 2020 the Irish regulator followed up with separate inquiries into Google's location data and Tinder. Five years on, the same office was probing Google over using EU users' personal data to train foundation AI models — the ad-data case established the playbook.
First-order effects
- Google's advertising data-processing practices — the plumbing of its largest revenue line — now face a formal GDPR examination by its own lead regulator, with potential fines and mandated processing changes on the table.
- Other EU supervisory authorities can weigh in through the one-stop-shop mechanism, so the DPC's framing of the case effectively sets the terms of debate for every national regulator.
Second-order effects
- Brussels' competition enforcers opened their own preliminary investigations into Google's and Facebook's ad-data practices within months, meaning any privacy finding hands antitrust authorities a ready-made evidentiary base on how ad data is gathered and monetized.
- Advertisers and publishers dependent on Google's ad stack face a compliance-overhang scenario: if the DPC forces changes to how transaction data is processed, targeting and measurement economics shift for everyone buying and selling through that stack.
Third-order effects
- The case cements the DPC's role as de facto gatekeeper for US tech in Europe — a single Irish office whose pace and appetite determine enforcement against firms employing thousands in Dublin, a structural tension critics have pressed since the Facebook probe.
- If the privacy and antitrust tracks converge, the endgame is not fines but structural questions about whether ad-data collection and ad selling can sit inside one company — the systemic issue both investigations point toward, though no outcome is yet determined.
The trend: European regulators are converging on Big Tech's advertising-data practices from both the privacy and competition sides, with Ireland's DPC as the pivot point for Google.