A HIGH COURT challenge has been brought against the Data Protection Commission’s alleged failure to fully investigate a complaint made about Google and IAB Europe’s procession of personal data.

The action has been brought by Dr Johnny Ryan, a senior fellow of the Irish Council for Civil Liberties, regarding what he claims is the DPC’s delay in investigating his 2018 complaint regarding the two companies.

The DPC, in correspondence with Ryan’s lawyers, has denied that it has delayed in handling the complaint.

Ryan, who in his capacity with the ICCL raises issues of concern about data protection rights, has sued the DPC over its alleged failure to progress and substantially complete the investigation into his complaint.

His complaint concerns the operation of a system, alleged used by Googles and IAB, called ‘Real Time Bidding’ or (RTB) which underlies the targeting of individual data subjects for online advertising based on their personal data.

The failure to investigate the matter, he claims, is in breach of the requirements of both the 2018 Data Protection Act and the GDPR. (General Data Protection Regulation), which is the EU’s privacy and data protection requirements.

In his complaint, Ryan raised concerns including that the RTB systems used by the two firms involves the unauthorised, and potentially unlimited disclosure and processing of personal data.

His complaint contains several instances where he claims that Google and IAB have breached GDPR.

The DPC is the state’s supervisory authority in respect of GDPR and in respect of data controllers who main establishment is in Ireland.

He also raised issues about the company’s alleged inability to demonstrate their compliance with the GDPR requirement that personal data be processed lawfully and fairly, or that the processing of personal data be kept to a minimum.

The High Court heard that the DPC opened an inquiry into RTB in May 2019, under its own violation, and there had been detailed correspondence between Ryan and the DPC over the matter.

However, Ryan claims that his complaint has not been properly or adequately investigated by the commission and has brought High Court judicial review proceedings against the DPC.

In his action, Ryan, represented by James Doherty SC and Sean O’Sullivan Bl, seeks a declaration that the respondent has failed to carry out an investigation into the complaint with all due diligence within a reasonable time.

He also seeks an order directing the DPC to proceed with the investigation of he that part of the complaint not addressed in the in the inquiry, without delay.

He further seeks that the matter be referred to the Court of Justice of the European Union.

The action came before Mr Justice Charles Meenan today. The judge on an ex-parte basis, granted Ryan permission to bring his challenge.

The matter was adjourned to a date in May.