Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
By Sara Merken
An Irish probe into Twitter Inc.'s data disclosure practices may set the bar for what type of personal data U.S. companies must turn over to consumers under the EU’s privacy regime.
The Ireland Data Protection Commission is investigating a Twitter user’s complaint that the social media giant refused to give him a list of hyperlinks he had clicked while on the platform. Twitter claims it’s exempt from a portion of the request by Michael Veale, a privacy and technology researcher at University College London, because it would take a “disproportionate effort” to produce, according to correspondence that Veale provided to Bloomberg Law.
The Irish authority is investigating because Twitter’s European headquarters is in Dublin, as are those of Facebook Inc. and Alphabet Inc.'s Google. The outcome of the probe could help set the terms for how companies under the EU’s General Data Protection Regulation must interpret consumers’ data access rights.
Businesses and other EU data protection authorities could look to the ruling for guidance to determine whether requests for detailed reports such as Veale’s are exempt. A decision for Veale could cost companies time and money to provide users with information.
“Cases such as this one are extremely important as they provide useful guidance to other companies on how they should deal with access requests as well as provide information to data subjects on how their personal data will be used,” said Maureen Daly, head of Dublin, Ireland-based law firm Beauchamps’ data protection and freedom of information group, told Bloomberg Law via email.
Under the GDPR, a company doesn’t have to comply with some provisions if it would take a “disproportionate effort.” Veale claims the exemption doesn’t apply to data access rights.
Veale complained to the Irish Data Protection Commission, disputing the disproportionate effort claim, and argued the provision Twitter cites of the GDPR isn’t relevant to his claim. The agency has opened a formal statutory inquiry into his complaint.
Twitter is “facilitating and engaging” with the Irish regulator, company spokesman Ian Plunkett said. Plunkett declined to comment directly on Veale’s allegations.
Veale said Twitter met his request for other personal information, such as a list of his contacts and direct messages. But it drew the line at his request for time stamps and meta-data from links he clicked on through Twitter’s “t.co” link shortening service and other hyperlinks.
Twitter has said it uses the link service to measure how many times a link is clicked and protect users from malicious sites.
The critical issue in the case is large tech companies with web tracking infrastructure “believing they are able to omit this data from access requests.” Veale told Bloomberg Law. He said clarity on access rights is “sorely needed.”
The European Data Protection Board will likely take up Veale’s complaint as well because the issue involves cross-border data processing, the Irish agency said in an Oct. 11 letter to Veale that he shared with Bloomberg Law.
A spokesperson for the agency told Bloomberg Law the agency doesn’t comment on ongoing inquiries.
“The outcome of the inquiry could have far-reaching implications for organizations that process personal data, particularly in the tech sector,” James Castro-Edwards, London-based partner and head of data protection at Wedlake Bell LLP, told Bloomberg Law by email.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to email@example.com.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to firstname.lastname@example.org.
Put me on standing order
Notify me when new releases are available (no standing order will be created)