/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR

Chronicles

The story behind the story

← → days · ↑ ↓ browse · Enter similar · o open

The Irish Council for Civil Liberties sues Ireland's DPC for delaying investigating a 2018 complaint over Google and IAB Europe's real time bidding ad systems

Aodhan O Faolain / TheJournal.ie :

TheJournal.ie Aodhan O Faolain

Context & Ripple Effects

Ireland’s DPC had already opened a Google online-advertising data investigation in 2019, placing the regulator at the center of enforcement for a major ad-tech complaint. The ICCL’s suit turns the focus from the underlying real-time-bidding practices to the DPC’s pace in handling them.

The case follows an EU ombudsman inquiry into Ireland’s GDPR complaint handling, and later coverage records repeated EU-level reversals of Irish DPC decisions. Together, those developments make procedural delay and supervisory effectiveness central to the dispute.

First-order effects

  • The ICCL’s action puts the Irish DPC under direct legal pressure to account for the delayed handling of the 2018 complaint, while Google and IAB Europe remain tied to an unresolved regulatory matter.
  • The DPC’s handling of Google’s advertising-data practices becomes a court-tested issue rather than solely an administrative enforcement process.

Second-order effects

  • A prolonged dispute over the DPC’s timing raises the stakes for Ireland’s role as lead supervisor in cross-border cases involving Google, whose EU privacy matters depend on timely Irish decisions.
  • EU institutions and privacy complainants gain a sharper basis to challenge enforcement delays, building on scrutiny that later included EU-level reversals of Irish DPC decisions.

Third-order effects

  • If court challenges to regulatory delay become a recurring route, GDPR enforcement may be shaped as much by oversight of national regulators as by investigations of technology companies.
  • The pattern points to a data-rights regime in which large platforms’ compliance exposure is mediated by the capacity and accountability of the lead supervisory authority.

The trend: Cross-border privacy enforcement is increasingly testing whether lead regulators can process major platform-data complaints as effectively as they can open them.

Discussion

  • @johnnyryan Johnny Ryan on x
    We are taking the Irish Data Protection Commission to court. For 3½ years it has failed to act on a GDPR complaint against Google's massive Real-Time Bidding ("RTB") advertising data breach. https://www.iccl.ie/...
  • @johnnyryan Johnny Ryan on x
    As we reported previously, the DPC is the bottleneck of GDPR enforcement against Google, Facebook, and other big tech firms for the whole EU. Its failure to act against Google's RTB system has exposed all Europeans to it for 3½ years+. https://twitter.com/...
  • @johnnyryan Johnny Ryan on x
    Timeline of Inaction 2017 May - alert the DPC about massive online ads security breach. 2018 Sept - lodge GDPR complaint. 2019 May - DPC says it launches an inquiry. 2022 Jan - DPC says it finally has an overview of what it will investigate - but refuses to investigate security..…
  • @thejournal_ie @thejournal_ie on x
    A High Court challenge has been brought against the Data Protection Commission's alleged failure to fully investigate a complaint made about Google and IAB Europe's procession of personal data. https://www.thejournal.ie/...