The DPC arrives with baggage. Its own reporting showed 21 major cross-border GDPR probes open as of 2019 with no decisions issued, and in 2020 EU regulators were still clashing over how much to fine Twitter for its 2018 data breach, a dispute that stalled parallel investigations into Facebook and Google. Whether this new case moves faster is the live question.
First-order effects
Twitter now faces coordinated GDPR inquiries from its lead regulator (Ireland's DPC) and France's CNIL, adding EU legal exposure on top of the congressional investigation already underway.
The DPC and CNIL must work through the GDPR's one-stop-shop coordination — the same mechanism that produced the 2020 deadlock over Twitter's breach fine — so the pace of any findings depends on how well they align this time.
Second-order effects
A substantiated finding would pressure the DPC to convert its historically slow inquiry pipeline into actual enforcement, raising the stakes for every other multinational in its queue of cross-border probes.
Whistleblower complaints are emerging as a parallel trigger for regulation on two fronts at once — congressional committees and EU data protection authorities — meaning a single insider disclosure can force a company to defend the same practices in multiple jurisdictions simultaneously.
If the DPC keeps issuing few decisions while cases accumulate, the Irish lead-regulator model itself becomes the contested question, inviting other national authorities like the CNIL to assert a larger role in policing US tech platforms operating in Europe.
The trend: Insider whistleblowing is becoming a standard ignition point for transatlantic regulatory action, with EU privacy authorities increasingly willing to act independently of Washington's timeline.
The Irish Data Protection Commission held a meeting with Twitter on Tuesday over whistleblower allegations that the company made “egregious and ongoing misrepresentations” to regulators about the state of its data security. https://pro.politico.eu/...
@cearta ... The big question would be “what is the offence”, because *offences* (as opposed to infringements incurring an administrative sanction) are set out in Chapter 7 of the Act.
@cearta ... Now... If @DPCIreland finds that the whistleblower allegations hold water and *if* they determine an offence has been committed, will they pursue a s146 prosecution of officers, directors, or managers of the corporate body? That is a *criminal* investigation. But it w…
Twitter whistleblower Peiter “Mudge” Zatko is being represented by Whistleblower Aid who also represented Facebook whistleblower Frances Haugen. https://www.cnn.com/...
Hard to imagine a worse whistleblower for Twitter than an unimpeachable expert who's made a storied career out of finding vulnerabilities and explaining them to industry, government and media.
Reading through the Twitter whistleblower complaint and it's striking that this is essentially the same allegation Frances Haugen made re: Facebook except in Twitter's case... an executive is explicitly admitting it at a board meeting https://twitter.com/...
I don't like the phrase “moral compass” because it indulges our tendency towards hero worship, but Mudge has had a long & respected career working on serious things that benefit the public good. It says a lot that professionals of the stature of Dug, Cris, and Dave vouch for him.…
Quote from @sawaba: “[Mudge is] literally the last person you want to hire if you're just looking to improve optics after a breach.” In other words, Twitter had to know it was hiring a straight shooter when they brought him in.
Mudge is only important here because he's an extremely credible source; otherwise, he's not the story. @paraga sending his PR flacks to portray Mudge as a disgruntled employee isn't merely not credible, it's irrelevant, because it's not evidence that the allegations are false.
The thing with Mudge is he's untouchable when it relates to NDAs There are plenty of people who could be whistleblowers about their companies, but this would torch their careers https://twitter.com/...