Ireland
Ireland's DPC is the EU's busiest Big Tech supervisor — every US platform's European regulator
Data Protection Commission·DPC
Enforcement profile
The DPC is the de facto global privacy regulator for US tech companies operating in the EU. Its decisions are co-determined with other EU DPAs under Article 60, which means fines are often increased during the dispute resolution process. Investigation timelines are among the longest in the EU (2–4 years) but outcomes are consistently the largest globally.
Notable enforcement decisions
Largest GDPR fine ever issued: unlawful transfer of EU user data to the US via SCCs post-Schrems II.
Children's account settings exposed email addresses and phone numbers publicly by default.
Insufficient transparency in how WhatsApp processed and shared user data with Meta companies.
Children's data processed with public settings by default, contrary to data minimisation principles.
Active regulations
The 214-meter sheer sea cliffs stretching 14 km along County Clare's Atlantic coast — Ireland's most dramatic coastal landscape.
Enforcement data is based on publicly available decisions and may not reflect every action, appeal, reduction, or subsequent court ruling. Fine amounts are shown as reported at the time of the decision. This information is for intelligence purposes and does not constitute legal advice.