Privacy group files GDPR lawsuit against online advertising industry
The Irish Council for Civil Liberties is going after Amazon, Facebook, Google and more over alleged data privacy breaches


The Irish Council for Civil Liberties (ICCL) has filed a lawsuit in a German court on Wednesday against the world's online advertising industry.
The legal action takes aim at tech giants such as Google, Amazon, Facebook and Twitter, as well as the Interactive Advertising Bureau (IAB), and challenges the industry's rules.
It's been brought by Dr Johnny Ryan, a senior fellow at the ICCL, who believes that the Data Protection Commission in Ireland, along with other regulators within the EU, have failed to act on formal complaints the ICCL has submitted over the last three years.
Part of the lawsuit focuses on the online advertising industry's rulebook for building profiles - or "secret dossiers" - of individuals, as well as the data shared between ad brokers and other firms while ad space is being auctioned as a website loads.
This is called the real-time bidding (RTB) system, which is a core part of today's online advertising industry used by thousands of companies through the IAB. It collects people's browsing history and auctions it to hundreds of thousands of third parties so they can bid on advertising space.
"These secret dossiers about you - based on what you think is private - could prompt an algorithm to remove you from the shortlist for your dream job," Ryan claimed in a statement. "A retailer might use the data to single you out for a higher price online. A political group might micro-target you with personalised disinformation."
RELATED RESOURCE
The UK 2020 Databerg report
Cloud adoption trends in the UK and recommendations for cloud migration
Ryan also suggests, incorrectly, that the use of the system is a "daily data breach" and hits out General Data Protection Regulation (GDPR) regulations for a lack of action on this issue. He has also previously accused the UK's Information Commissioner's Office of failing to regulate real-time bidding.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"In September 2018 we brought evidence of the unlawful behaviour of the ad industry to regulators," said solicitor Ravi Naik, a Partner at law firm AWO. "Owing to regulatory inertia, years later, we have no resolution to that conduct. Instead, the Irish Council for Civil Liberties have had to stand up for all of our rights."
The ICCL has claimed to have hundreds of pages of evidence ready to submit to a court in Hamburg that highlights personal data harvested from real-time bidding systems.
IT Pro has approached Google and Facebook for comment.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
Tech leaders worry AI innovation is outpacing governance
News Business execs have warned the current rate of AI innovation is outpacing governance practices.
By Emma Woollacott
-
Top data security trends
Whitepaper Must-have tools for your data security toolkit
By ITPro
-
SEC data breach rules branded “worryingly vague” by industry body
News The new rules announced last week leave many questions unanswered, according to security industry experts
By Ross Kelly
-
The gratitude gap
Whitepaper 2023 State of Recognition
By ITPro
-
Meta sues ‘data scraping for hire’ service that collected info on 600k users
News Meta says tackling data scraping will require a “collective effort” from platforms and policymakers
By Ross Kelly
-
Building a data governance strategy in 2023
In-depth Data governance will continue to expand as attitudes change and businesses look to optimise the value of their data
By Keri Allan
-
FCC plans strict overhaul of 15-year-old US data breach regulations
News Telcos could no longer be able to use negligence as a defence for data breaches as the FCC also seeks to hasten public notification of breaches
By Rory Bathgate
-
UK follows EU in securing data deal with South Korea
News The deal will foster cross-border collaboration between businesses by reducing administrative and financial frictions
By Zach Marzouk