Twitter faces privacy scrutiny over claims it fails GDPR
>
Under the EU’s General Data Protection Regulation (GDPR), Elon Musk’s Twitter network no longer meets the criteria to claim Ireland as its main location. TechCrunch (opens in new tab).
Many technology companies with customers in Europe are using a one-stop-shop (OSS) for the GDPR, which allows them to streamline administration by “engaging exclusively with a leading data regulator in the EU member state”. However, Twitter seems to have broken some rules that allow it to use an OSS.
Along with massive layoffs totaling about half of its workforce, many of the company’s vital employees have walked away, including chief information security officer Lea Kissner, chief privacy officer Damien Kieran and chief compliance officer Marianne Fogarty.
Twitter AVG
TechCrunch also points out that very few people want to take the reins of these vacant roles, as any GDPR breaches will likely fall on their shoulders, given Musk’s controversial modus operandi on Twitter thus far.
Ireland’s data protection commission has already publicly announced that it would ask the company to discuss changes to Twitter’s privacy practices following Musk’s induction as CEO just over two weeks ago.
If it decides that Twitter no longer meets the relevant criteria, the company will no longer be able to use Ireland as its OSS, opening it up to individual actions from each of the 27 countries that make up the European Union, many of which are said to be more “aggressive”. in their approach to responding to complaints.
In addition to a potentially lengthy battle to remain GDPR compliant, new Twitter products are reportedly circumventing the review procedures that were typical of the previous management. An article about The edge (opens in new tab) even indicates that the controversial Twitter Blue subscription was submitted for review “the night before launch.”