Skip to main content

Precedent corpus / DPC (Ireland)

Groupon Ireland Operations Limited

DPC (Ireland) case IN-20-37-1, decided . No monetary penalty.

ContextAppeal status not checked

We have not checked whether this decision was appealed. This is not a statement that no appeal exists.

No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.

What the regulator decided

Groupon demanded photographic government-issued identification to verify the identity of a complainant who had requested access and erasure, despite less intrusive alternatives being available, breaching the data-minimisation principle in Article 5(1)(c) GDPR; Groupon also continued to process the complainant's personal data after the erasure request without a valid Article 6(1) basis, breaching Article 17(1) GDPR.

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Reprimand under Article 58(2)(b) GDPR; no administrative fine. Cite alongside the Twitter IN-19-6-1 reprimand for the principle that identity verification must be proportionate - a controller cannot collect more personal data than necessary as a precondition to honouring an Article 15 or Article 17 request.

Verification trail

Checked against the primary source on 27th May 2026. Next review 27th November 2026.

Cite this case
BibTeX
@misc{consentmark-precedent-dpc-in-20-37-1,
  author       = {{ConsentMark}},
  year         = {2024},
  title        = {DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited},
  howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-20-37-1}},
  note         = {ConsentMark methodology v7.8.1}
}
APA
ConsentMark. (2024, March 8). DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited. Methodology v7.8.1. https://www.consentmark.com/precedent/dpc-in-20-37-1
Markdown
[DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited - ConsentMark](https://www.consentmark.com/precedent/dpc-in-20-37-1)
Plain text
DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited - ConsentMark, 2024-03-08, methodology v7.8.1, https://www.consentmark.com/precedent/dpc-in-20-37-1