The report, titled ‘5 years: GDPR’s crisis point’ (the “Report”), takes somewhat of a critical view of data protection in Ireland and the EU, particularly in relation to enforcement against big tech companies.
According to the Report, the GDPR is “largely paralysed” when it comes to enforcement against big tech companies. The key insights highlighted by the Report are as follows:
- Compliance orders are “the most powerful GDPR enforcement tool”. However, the European Data Protection Board (the “EDPB”) register of EU-level decisions shows that only 49 compliance orders have been made since the GDPR came into effect.
- 64% of enforcement taken by late-2022 were “merely reprimands”.
- The world’s top three technology firms are based in Ireland (Apple, Microsoft and Google).
- 87% of cross-border complaints to Ireland involve the same eight big tech companies: Meta, Google, Airbnb, Yahoo!, Twitter, Microsoft, Apple and Tinder.
- The Data Protection Commission (the “DPC”) in Ireland used its discretion to choose an “amicable resolution” to conclude 83% of cross-border complaints it received.
- 75% of the DPC’s GDPR decisions in EU cases were overruled by other EU data bodies. The report highlights that “Only one other country, in one single case, has ever been overruled in this manner.” (France)
- The combined budget of the European Economic Area’s data protection authorities in 2022 was a staggering €326,730,549.
- The Report describes Ireland’s GDPR enforcement as a “bottleneck”. However, funding does not appear to be an issue in this regard as the DPC’s budget ranks top five amongst EU countries.
The Report comes following the high-profile enforcement action taken against Meta in Ireland, with two decisions of the DPC being published on 31 December 2022 in which Meta was fined €210 million for breaches of the GDPR relating to Facebook services and €180 million for breaches in relation to Instagram services. Despite this, the Report urges the European Commission to take “serious action” to tackle the enforcement crisis in Europe.
The ICCL’s report is available here.
Written by: Steven Whelan and Rosie Callan
Sign up to our email digest
Click to subscribe or manage your email preferences.