Privacy probe launched against Google from Ireland's Data Protection Commission
A complaint was made last year.
Google is to have its first General Data Protection Regulation probe from Ireland’s Data Protection Commission (DCP).
The Irish Data Protection Commission announced on Wednesday that “a statutory inquiry pursuant to section 110 of the Data Protection Act 2018 has been commenced in respect of Google Ireland Limited’s processing of personal data in the context of its online Ad Exchange”.
The DPC, which acts as the lead supervisory authority for Google in the EU, said its probe would examine whether Google’s processing of data in advertising transactions breaches the bloc’s privacy rules.
It was triggered by a formal complaint last year from Dr Johnny Ryan, Chief Policy Officer at Brave, the private web browser.
In a statement, a Google representative said the company will work with the Irish regulator.
“We will engage fully with the DPC’s investigation and welcome the opportunity for further clarification of Europe’s data protection rules for real-time bidding,” the representative said. “Authorised buyers using our systems are subject to stringent policies and standards.”
Google was fined €50 million earlier this year by France’s privacy regulator, in the first penalty for a US tech giant since the GDPR law was introduced 12 months ago.
Below you can read the full statement from the DPC on the probe.
"Arising from the Data Protection Commission’s ongoing examination of data protection compliance in the area of personalised online advertising and a number of submissions to the Data Protection Commission, including those made by Dr. Johnny Ryan of Brave, a statutory inquiry pursuant to section 110 of the Data Protection Act 2018 has been commenced in respect of Google Ireland Limited’s processing of personal data in the context of its online Ad Exchange.
"The purpose of the inquiry is to establish whether processing of personal data carried out at each stage of an advertising transaction is in compliance with the relevant provisions of the General Data Protection Regulation (GDPR). The GDPR principles of transparency and data minimisation, as well as Google’s retention practices, will also be examined."