IRISH DPC ANNOUNCES ITS DECISION IN TWITTER INQUIRY

15.12.2020

The Irish Data Protection Commission (“DPC”) has published the concluded decision in Twitter inquiry that have been submitted following the draft decision by the DPA.

In the present case, following receipt of a breach notification from Twitter, the DPC, as a result its investigation, found that Twitter infringed Article 33(1) and 33(5) of the GDPR in terms of a failure to notify the breach on time to the DPC and a failure to adequately document the breach. Therefore, Twitter has been imposed fine of €450.000 by the DPC.

The draft decision in this inquiry, having been submitted to other Concerned Supervisory Authorities under Article 60 of the GDPR was the first one to go through the Article 65 process since the introduction of the GDPR and was the first Draft Decision in a “big tech” case on which all EU supervisory authorities were consulted as Concerned Supervisory Authorities.

The GDPR requires most breaches of personal data to be notified to the relevant supervisory authority within 72 hours of the controller becoming aware of the breach.

You can reach the full text of the decision here.

Should you have any queries and/or remarks, please do not hesitate to contact us. 

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr