Airbnb Ireland UC

DPC (Ireland) case IN-20-38-1, decided 2024-01-31. No monetary penalty (reprimand or guidance).

What the regulator decided

Airbnb required a copy of a government-issued identity document both to complete account registration and to process the user's erasure request, despite the complainant having provided minimal personal data before requesting deletion; the collection breached Article 5(1)(c) GDPR (data minimisation) and lacked a valid Article 6(1) basis, in particular as a precondition to action an Article 17 request.

Primary source

Regulator-owned URL. Quote this in legal briefs and academic citations.

https://www.dataprotection.ie/sites/default/files/uploads/2024-04/Inquiry-into-Airbnb-Ireland-UC-31-January-2024-EN_0.pdf

ConsentMark interpretation

Operator-readable note on how this case shapes the ConsentMark scanner narrative. Not a legal opinion; cites the primary source.

Reprimand under Article 58(2)(b) GDPR; no administrative fine. Cite alongside the Twitter IN-19-6-1 and Groupon IN-20-37-1 reprimands for the pattern that universal ID-document collection at signup or rights- request time is not proportionate without a documented risk basis.

Verification trail

Verified by: donal
Verified at: 2026-05-27
Review due: 2026-11-27

Cite this case

Pick the format that matches where you are pasting. The methodology version is preserved in every variant so the citation stays verifiable after future methodology changes.

BibTeX

@misc{consentmark-precedent-dpc-in-20-38-1,
  author       = {{ConsentMark}},
  year         = {2024},
  title        = {DPC (Ireland) IN-20-38-1 - Airbnb Ireland UC},
  howpublished = {\url{https://www.consentmark.com/precedent/dpc-in-20-38-1}},
  note         = {ConsentMark methodology v1.3}
}

APA

ConsentMark. (2024, January 31). DPC (Ireland) IN-20-38-1 - Airbnb Ireland UC. Methodology v1.3. https://www.consentmark.com/precedent/dpc-in-20-38-1

Markdown

[DPC (Ireland) IN-20-38-1 - Airbnb Ireland UC - ConsentMark](https://www.consentmark.com/precedent/dpc-in-20-38-1)

Plain text

DPC (Ireland) IN-20-38-1 - Airbnb Ireland UC - ConsentMark, 2024-01-31, methodology v1.3, https://www.consentmark.com/precedent/dpc-in-20-38-1