Big Tech’s data watchdog in Europe is facing accusations of bureaucracy and lethargy 

FAANG stocks displayed at the Nasdaq.

Adam Jeffery | CNBC

DUBLIN — The EU’s landmark privacy rules were hailed as a success when launched in 2018, but some believe they have placed too much weight on individual authorities and have led to sluggish activity and more bureaucracy.   

TikTok recently came under the jurisdiction of Ireland’s Data Protection Commission, adding to a hefty workload for the Irish regulator. 

With several major tech firms, including Facebook, Google and Twitter, holding their European headquarters in Dublin, the DPC has become Europe’s most high-profile data watchdog in enforcing GDPR, the region’s data privacy rules.

The regulation, with its possibility for big fines, is seen as the most robust piece of data protection law in history. But the DPC’s elevated status since it came into effect has raised questions around how well resourced it is to handle such a large and important workload.

The DPC’s annual report for 2020 outlined that it handled 10,151 cases in total that year, an increase of 9%. Meanwhile, the authority is in the middle of a high-profile legal case with Facebook over data transfers to the U.S.

In December, more than 2½ years after GDPR came into effect, the DPC issued its first GDPR financial penalty against a major U.S. tech company when Twitter was fined 450,000 euros ($535,594).

The length of the investigation and the sum of money drew criticism from Max Schrems and other data protection advocates.

Noyb, the organization founded by Schrems, is a frequent critic of the DPC. Romain Robert, a senior lawyer at Noyb, said that the organization has been frustrated by the enforcement of GDPR by most data protection authorities in Europe.

“The expectations towards the DPC are really disappointing. We don’t see that many decisions,” Robert told CNBC.

Graham Doyle, the deputy commissioner at the DPC, told CNBC that investigations, especially cross-border probes into big tech firms, take some time.

“I’ve been saying this since May 2018, trying to manage expectations, do not be expecting these big headline fines (immediately). It’s going to take time,” Doyle said.

“There is this focus on the pace at which investigations go and a belief that just because you have more people, it means things will happen quicker. That’s not necessarily the case. In some areas it will help but in others it means that you can do more simultaneously,” Doyle said.

In the country’s last budget, the DPC received 19.1 million euros in funding from the Irish government, up from 16.9 million euros the year before. The agency has close to 150 employees and will be at 200 by the end of the year.

Doyle countered calls for swift decisions to be made once complaints are filed.

“That’s not taking into account fair procedures, that’s just making an assumption,” he said.


Pipeline of cases

Source link

Leave a comment

%d bloggers like this: