EU regulators wrangle over Twitter data privacy penalty


Twitter and other US tech companies like Apple, Facebook and Google have their European headquarters in Dublin, making the Irish watchdog their lead privacy regulator in the European Union. — AP

LONDON: European Union privacy regulators are wrangling over the penalty Ireland's data privacy watchdog was set to issue Twitter for a data breach, pushing back the case's long awaited conclusion under the bloc's tough new data privacy rules.

The Irish Data Privacy Commission was expected to issue its decision in the Twitter case, which would be its first involving a US technology company since the new privacy law, known as GDPR, took effect in 2018, allowing for hefty fines.

But it said on Aug 20 that its counterparts in other countries – so-called concerned supervisory authorities – challenged a draft decision it circulated in May.

"A number of objections were raised,” the Irish regulator said in a brief statement. "However, following consultation a number of objections were maintained and the (Irish Data Privacy Commission) has now referred the matter to the European Data Protection Board," the independent body representing the bloc's privacy regulators. It provided no other details. The board has up to two and a half months to come up with a decision.

Under the EU’s General Data Protection Regulation, a single regulator takes the lead role in cross-border data privacy cases as part of a "one-stop shop” system.

Twitter and other US tech companies like Apple, Facebook and Google have their European headquarters in Dublin, making the Irish watchdog their lead privacy regulator in the European Union.

But in this system, the main regulator has to share its draft decision with regulators in other EU member states and take their feedback into consideration. The Twitter case could foreshadow more disagreements and delays that Irish authorities may face as they wrap up about two dozen other investigations involving the Silicon Valley giants.

The Twitter case stems from a security breach that affected its Android app users and let anyone view protected tweets over more than four years. The Irish regulator said in a June report it was investigating the company for failure to report the breach within 72 hours.

Under GDPR, companies that don't make such timely disclosures can be fined up to €10mil (RM49.43mil) or 2% of a company’s annual revenue, whichever is higher. In 2019 Twitter's revenue reached US$3.46bil, making a potential fine worth up to US$69mil (RM288.03mil). – AP

Article type: metered
User Type: anonymous web
User Status:
Campaign ID: 1
Cxense type: free
User access status: 3
Join our Telegram channel to get our Evening Alerts and breaking news highlights

Data Privacy

   

Next In Tech News

US funds software for Russians to slip past censors
Elon Musk breaks Twitter silence with photo with Pope
SG cops warn of new phishing scam involving email about purported traffic offence
EV demand is so hot that Tesla owners are flipping their cars like houses
Opinion: Is it fair to capture a couple's PDA on mobile camera?
Searches for 'abortion pills' are spiking in the US. Here's how Google could use your search history against you
Deadly abortion misinformation rings alarm bells for doctors, TikTok
Man accused of buying 39 Teslas via US$45 million scam with apparent false ties to Elon Musk
Dutch uni gets cyber ransom money back – with interest
Google to delete user data on trips to abortion clinics

Others Also Read