Precedent corpus / DPC (Ireland)
Groupon Ireland Operations Limited
DPC (Ireland) case IN-20-37-1, decided . No monetary penalty.
We have not checked whether this decision was appealed. This is not a statement that no appeal exists.
No ConsentMark grade rests on this decision. It is published here because it is relevant enforcement, not because it bears on what a browser does before consent.
What the regulator decided
Groupon demanded photographic government-issued identification to verify the identity of a complainant who had requested access and erasure, despite less intrusive alternatives being available, breaching the data-minimisation principle in Article 5(1)(c) GDPR; Groupon also continued to process the complainant's personal data after the erasure request without a valid Article 6(1) basis, breaching Article 17(1) GDPR.
Primary source
Regulator-owned URL. Quote this in legal briefs and academic citations.
https://www.dataprotection.ie/sites/default/files/uploads/2024-06/Final-Decision-Groupon-International-Limited-March-2024-EN.pdfConsentMark interpretation
Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.
Reprimand under Article 58(2)(b) GDPR; no administrative fine. Cite alongside the Twitter IN-19-6-1 reprimand for the principle that identity verification must be proportionate - a controller cannot collect more personal data than necessary as a precondition to honouring an Article 15 or Article 17 request.
Verification trail
Checked against the primary source on 27th May 2026. Next review 27th November 2026.
Cite this case
@misc{consentmark-precedent-dpc-in-20-37-1,
author = {{ConsentMark}},
year = {2024},
title = {DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited},
howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-20-37-1}},
note = {ConsentMark methodology v7.8.1}
}ConsentMark. (2024, March 8). DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited. Methodology v7.8.1. https://www.consentmark.com/precedent/dpc-in-20-37-1[DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited - ConsentMark](https://www.consentmark.com/precedent/dpc-in-20-37-1)DPC (Ireland) IN-20-37-1 - Groupon Ireland Operations Limited - ConsentMark, 2024-03-08, methodology v7.8.1, https://www.consentmark.com/precedent/dpc-in-20-37-1