Ireland's Data Protection Commission fined Google €403 million for GDPR violations related to processing users' location data between May 2018 and February 2020, and issued a compliance order requiring remediation within six months. The enforcement action signals heightened regulatory scrutiny of transparency, consent, and lawful basis for processing location data, prompting organizations to review their data practices.
No articles specifically tagged for Ireland yet. Check our blog for general compliance coverage.
Ireland's Data Protection Commission fined Google €403 million for GDPR violations related to location data processing, including lack of valid legal basis, transparency failures, and excessive retention. Google must bring its processing into compliance within six months, signaling heightened enforcement of GDPR against Big Tech.
Ireland has introduced new tax-advantaged investment accounts that explicitly exclude cryptocurrencies from eligible assets, allowing only listed stocks, bonds, and ETFs. This reflects a cautious stance on digital assets and may impact investor interest in crypto within tax-incentivized frameworks.
Ireland faces a transposition deadline for implementing the EU Pay Transparency Directive, which mandates greater pay transparency to address gender pay gaps and ensure equal pay for equal work. Companies operating in Ireland need to prepare for new reporting and compliance requirements as the government works to meet EU obligations.
The Irish Data Protection Commissioner has acknowledged it does not issue formal decisions on approximately 99.93% of GDPR complaints, interpreting 'handle' to mean disposal without rulings. This enforcement gap raises concerns about GDPR compliance and data protection rights, potentially signaling reduced regulatory scrutiny for companies operating in Ireland.
Ireland's Data Protection Commission (DPC) settled a judicial review over significant delays in GDPR enforcement cases against Meta platforms, agreeing to pay tens of thousands in legal costs. This highlights systemic enforcement inefficiencies and procedural unfairness concerns that could impact data privacy rights and regulatory accountability in Ireland.
Ireland has amended its Data Protection Act with Section 26A, allowing the Data Protection Commission to declare documents related to pending GDPR procedures as 'confidential' and criminalizing their disclosure. This change raises significant freedom of speech concerns and may hinder GDPR enforcement, particularly against big tech companies, by creating procedural deadlocks and straining EU-wide cooperation.
Niamh Sweeney, a former senior Meta lobbyist, has been appointed as a commissioner at the Irish Data Protection Commission (DPC), which serves as the EU's lead privacy regulator for most US Big Tech companies. This appointment raises concerns about regulatory capture and potential conflicts of interest in ongoing GDPR enforcement cases against Meta, including appeals of significant fines.
The Irish High Court has granted Facebook leave to file a Judicial Review against Ireland's Data Protection Commission (DPC) and stayed the DPC's new 'ex officio' investigation into Facebook's EU-US data transfers. This case highlights ongoing enforcement challenges under GDPR regarding the validity of Standard Contractual Clauses (SCCs) for data transfers to the US post-Schrems II, potentially impacting companies relying on SCCs for transatlantic data flows.
The Irish High Court has granted noyb.eu leave for a Judicial Review against the Irish Data Protection Commission over excessively slow handling of GDPR complaints against Instagram and WhatsApp. This highlights systemic enforcement challenges that create bottlenecks for GDPR rights enforcement against Ireland-based multinationals, potentially signaling increased judicial scrutiny of regulatory delays.
The Irish government has proposed an amendment (Section 26A) to the Courts and Civil Law (Miscellaneous Provisions) Bill 2022 that would allow the Data Protection Commissioner to declare procedures confidential and criminalize reporting or discussion of DPC activities. This threatens transparency and freedom of speech, potentially undermining GDPR enforcement accountability for multinational tech companies.
Ireland faces challenges implementing the EU Pay Transparency Directive by the June 7, 2026 deadline, with key obligations including providing pay ranges to job applicants, prohibiting pay history inquiries, granting workers rights to pay information by sex, and requiring gender pay gap reporting starting in 2027 for employers with 150+ workers. Only 6% of Irish employers feel prepared due to incomplete legislative transposition and lack of necessary tools.