Open letter: The EU must safeguard the independence of data protection authorities
EDRi and 40 civil society organisations urge the European Commission to assess the independence of Ireland’s newly appointed Data Protection Commissioner (DPC), who previously held a senior public affairs role at Meta. The appointment raises serious concerns about impartiality and the credibility of data protection enforcement in the EU.
A troubling appointment undermines trust in data protection enforcement
EDRi and 40 civil society organisation are deeply concerned by the recent appointment of a new Commissioner at the Irish Data Protection Commission (DPC). The appointee previously held a position as a senior lobbyist for Meta until August 2024, one of the largest technology platforms the DPC is mandated to regulate, and continued to advocate for this company until as recently as August 2024. This raises serious questions about both the perception and reality of the DPC’s independence at a moment when its impartiality is crucial for protecting rights across the European Union.
EU law requires regulators to act independently, a principle confirmed by the EU Court of Justice. As the lead regulator for the tech giants like Meta, Google and Apple, the Irish DPC’s decisions effectively shape how data protection rules are enforced across the continent. Its independence and effectiveness have therefore far-reaching consequences for the privacy and fundamental rights over 450 million people in Europe.
Yet, enforcement of the GDPR has long been inconsistent and delayed. Major investigations have often progressed only after intervention from the European Data Protection Board, other national authorities, or even the Court of Justice itself. This persistent pattern has turned Ireland into a bottleneck for effective GDPR enforcement.
Civil society organisations are calling on the European Commission to uphold the independence and integrity of data protection enforcement in the EU. The Commission should assess whether the appointee’s independence can be guaranteed in light of this appointment and establish EU-wide safeguards to prevent conflicts of interest and ensure transparent appointment procedures.
Independent watchdogs are vital to maintain public trust and protecting fundamental rights. If the EU fails to act, it will undermine the very credibility of data protection in Europe.
