Data protection violations by data brokers

By Thomas Vink, 25th May 2021

Online data brokers and advertising technology (adtech) companies gather data and build intricate profiles of internet users, which are then shared and sold to thousands of advertisers. Users have limited ways of giving informed consent or finding out who has access to their data or how it is used. DFF provided an emergency grant to Privacy International so they could translate a complaint they made against a French data broker. This was the only way the French data protection authority would agree to respond to the complaint. As part of their wider project, Privacy International additionally submitted complaints in the UK and Ireland against seven adtech companies, data brokers, and credit rating agencies.

In March 2020, the French data protection authority agreed to investigate the data broker in line with Privacy International’s complaint. Authorities in the UK and Ireland have also launched investigations based on Privacy International’s complaints. In October 2020, the UK regulator took enforcement action against one credit reference agency against which PI had filed a complaint.

Data protection violations by data brokers

Organisation Name

Privacy International

Country/Jurisdiction

France

Thematic Area

Privacy and Data Protection

Current Status

Complete, but litigation ongoing

Grant type

Emergency Litigation Support

Description

Online data brokers and advertising technology (adtech) companies gather data and build intricate profiles of internet users, which are then shared and sold to thousands of advertisers. Users have limited ways of giving informed consent or finding out who has access to their data or how it is used. DFF provided an emergency grant to Privacy International so they could translate a complaint they made against a French data broker. This was the only way the French data protection authority would agree to respond to the complaint. As part of their wider project, Privacy International additionally submitted complaints in the UK and Ireland against seven adtech companies, data brokers, and credit rating agencies.

In March 2020, the French data protection authority agreed to investigate the data broker in line with Privacy International’s complaint. Authorities in the UK and Ireland have also launched investigations based on Privacy International’s complaints. In October 2020, the UK regulator took enforcement action against one credit reference agency against which PI had filed a complaint.

The launching of these investigations brought increased media attention and engagement, which has helped to increase scrutiny on the privacy violations perpetrated by the sector.

"In March 2020, the French data protection authority agreed to investigate the data broker in line with Privacy International's complaint. Authorities in the UK and Ireland have also launched investigations"

Strategic Goal

To change the behaviour of data brokers, adtech companies and credit rating agencies by limiting the tracking and sharing of individual data, thus improving privacy protections for people across Europe.

Organisation Name

Women’s Link Worldwide

Image credit: Charles Deluvio on Unsplash