Twitter International Company

DPC (Ireland) case IN-19-1-1, decided 2020-12-09. USD 500k (about EUR 450k, our conversion).

ContextAppeal status not checked

No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.

What the regulator decided

Twitter International Company failed to notify the Data Protection Commission of a personal data breach within 72 hours of becoming aware of it, breaching Article 33(1) GDPR, and failed to document the breach adequately, breaching Article 33(5) GDPR.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.dataprotection.ie/en/dpc-guidance/decisions/inquiry-concerning-twitter-international-company-tic

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20260806010831/https://www.dataprotection.ie/en/dpc-guidance/decisions/inquiry-concerning-twitter-international-company-tic

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Full decision PDF at dataprotection.ie/sites/default/files/uploads/2021-02. Breach notification, not cookies or trackers. Cite for the Article 33 timeline, never for a tracking finding.

Verification trail

Verified by: donal
Verified at: 2026-08-27
Review due: 2027-02-27

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-dpc-in-19-1-1,
  author       = {{ConsentMark}},
  year         = {2020},
  title        = {DPC (Ireland) IN-19-1-1 - Twitter International Company},
  howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-19-1-1}},
  note         = {ConsentMark methodology v7.6}
}

APA

ConsentMark. (2020, December 9). DPC (Ireland) IN-19-1-1 - Twitter International Company. Methodology v7.6. https://www.consentmark.com/precedent/dpc-in-19-1-1

Markdown

[DPC (Ireland) IN-19-1-1 - Twitter International Company - ConsentMark](https://www.consentmark.com/precedent/dpc-in-19-1-1)

Plain text

DPC (Ireland) IN-19-1-1 - Twitter International Company - ConsentMark, 2020-12-09, methodology v7.6, https://www.consentmark.com/precedent/dpc-in-19-1-1