Twitter International Company

What happened

Having received submissions by Twitter, the Irish Data Protection Commissioner (DPC) proceeded to set out his provisional views as to whether, in notifying the breach to the Commission, Twitter had complied with its obligations under Article 33(1) but as well with Article 33(5). In relation to Article 33(1), the DPC view was that, on the basis of the information and documentation provided by Twitter, it was not possible to ascertain whether TIC had complied with its obligations under Article 33(1) to provide notification about the breach without undue delay. The same was found with Article 33(5); The Data Commissioner’s view was that, on the basis of the information and documentation supplied by the Company, Twitter had failed to comply with its obligation, under Article 33(5), to document the breach of data protection.

Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

The source doesn’t list which GDPR articles were involved.

• Data breach