Twitter International Company

DPC (Ireland) case IN-19-1-1, decided 9th December 2020. USD 500k.

ContextAppeal status not checked

We have not checked whether this decision was appealed. This is not a statement that no appeal exists.

No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.

What the regulator decided

Twitter International Company failed to notify the Data Protection Commission of a personal data breach within 72 hours of becoming aware of it, breaching Article 33(1) GDPR, and failed to document the breach adequately, breaching Article 33(5) GDPR.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.dataprotection.ie/en/dpc-guidance/decisions/inquiry-concerning-twitter-international-company-tic

Archived snapshot

Wayback Machine snapshot of the primary source. Use this when the regulator URL might be refactored or expire.

https://web.archive.org/web/20260806010831/https://www.dataprotection.ie/en/dpc-guidance/decisions/inquiry-concerning-twitter-international-company-tic

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Full decision PDF at dataprotection.ie/sites/default/files/uploads/2021-02. Breach notification, not cookies or trackers. Cite for the Article 33 timeline, never for a tracking finding.

Verification trail

Checked against the primary source on 27th August 2026. Next review 27th February 2027.

Cite this case

BibTeX

@misc{consentmark-precedent-dpc-in-19-1-1,
  author       = {{ConsentMark}},
  year         = {2020},
  title        = {DPC (Ireland) IN-19-1-1 - Twitter International Company},
  howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-19-1-1}},
  note         = {ConsentMark methodology v7.8.1}
}

APA

ConsentMark. (2020, December 9). DPC (Ireland) IN-19-1-1 - Twitter International Company. Methodology v7.8.1. https://www.consentmark.com/precedent/dpc-in-19-1-1

Markdown

[DPC (Ireland) IN-19-1-1 - Twitter International Company - ConsentMark](https://www.consentmark.com/precedent/dpc-in-19-1-1)

Plain text

DPC (Ireland) IN-19-1-1 - Twitter International Company - ConsentMark, 2020-12-09, methodology v7.8.1, https://www.consentmark.com/precedent/dpc-in-19-1-1