Home Privacy Irish Regulators Begin Investigating Google For GDPR Infringement

Irish Regulators Begin Investigating Google For GDPR Infringement

SHARE:

Real-time bidding is under the gun in Europe.

On Wednesday, Ireland’s Data Protection Commission (DPC) opened a formal investigation into whether Google’s ad-exchange data-processing practices violate the General Data Protection Regulation (GDPR).

GDPR celebrates its first birthday on May 25.

A complaint filed in September 2018 with regulators in Ireland and the United Kingdom triggered the probe. It argued that RTB is analogous to a systematic data breach: Consumers usually have no idea – let alone give consent – that nearly every time they visit a website, their personal browsing history is tied to a unique identifier used for behaviorally targeted advertising.

The original complaint, brought by Johnny Ryan, chief policy officer at web browser Brave, and two other privacy advocates, called out IAB Europe, ad tech vendors in general and Google in particular for its role in facilitating the programmatic ecosystem.

The Irish investigation will only consider whether Google Ireland’s processing of personal data through its online ad exchange violates the law.

As Google’s lead authority in Europe under GDPR, the Irish DPC has the power to order Google to stop using personal data in its ad products and to impose hefty fines.

“It is likely that the RTB industry will have to clean up after this – no more data Wild West,” Ryan told AdExchanger. “Our colleagues at the IAB and Google will have to consider how to operate in a way that protects personal data … I suspect the best way to do that is to remove personal data from the bid request.”

The Irish DPC’s decision in this case will be binding on other data protection authorities (DPAs), unless an objection is filed, Ryan said.

In January, Ryan and his watchdog crew enlisted a Polish digital privacy rights group to bring the same complaint in Poland. Earlier this week, the complaint spread to DPAs in the Netherlands, Spain, Belgium and Luxembourg.

Google’s privacy troubles this week were not restricted to the EU. On Tuesday, AppNexus founder and former CEO Brian O’Kelley called for Google’s breakup when he testified before the Senate Judiciary Committee.

Subscribe

AdExchanger Daily

Get our editors’ roundup delivered to your inbox every weekday.

O’Kelley derided the “advertising antitrust exemption,” or current antitrust law that is built around pricing but doesn’t really apply to free, ad-supported services.

Ryan also testified Tuesday during the same digital advertising, data privacy and online competition hearing as O’Kelley, along with two professors and a lawyer for good measure.

“The GDPR is risk-based, and that means big tech companies that create big risks get big scrutiny and face the prospect of big penalties,” Ryan told the committee. “Regulators are slowly starting to enforce, but it’s early days, and it will take years for the GDPR to have full effect. But things, I think, are already looking very bleak for our colleagues at Google and at Facebook.”

Must Read

Comic: No One To Play With

Google Pulls The Plug On Topics, PAAPI And Other Major Privacy Sandbox APIs (As The CMA Says ‘Cheerio’)

Google’s aborted cookie crackdown ends with a quiet CMA sign-off and a sweeping phaseout of Privacy Sandbox technologies, from the Topics API to PAAPI.

The Trade Desk’s Auction Evolutions Bring High Drama To The Prebid Summit

TTD shared new details about OpenAds features that let publishers see for themselves whether it’s running a fair auction. But tension between TTD and Prebid hung over the event.

Monopoly Man looks on at the DOJ vs. Google ad tech antitrust trial (comic).

How Google Stands In The DOJ’s Ad Tech Antitrust Suit, According To Those Who Tracked The Trial

The remedies phase of the Google antitrust trial concluded last week. And after 11 days in the courtroom, there is a clearer sense of where Judge Leonie Brinkema is focused on, and how that might influence what remedies she put in place.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters

The Ad Context Protocol Aims To Make Sense Of Agentic Ad Demand

The AI advertising agents will need their own trade group eventually. For now though, a bunch of companies are forming the Ad Context Protocol, or AdCP.

OUTFRONT Is Using Agencies’ AI Enthusiasm To Spur Wider Programmatic OOH Adoption

The desire for a data-driven reinvention of OOH inspired OUTFRONT to create agentic AI tools for executing and measuring OOH campaigns and comparing OOH to other channels.

Inside PubDesk, The Trade Desk’s New Dashboard That Shows What Buyers Actually Care About

A peek inside PubDesk, The Trade Desk’s new dashboard that gives sellers detailed info on how buyers value their inventory.