On 21 June 2023, the Irish Data Protection Commission (DPC) issued an official reprimand to Airbnb Ireland for EU General Data Protection Regulation (GDPR) violations concerning the retention and processing of identity documentation. The inquiry was initiated in March 2022 after a complaint was made that Airbnb had unlawfully requested a copy of a user's ID to verify their identity. The DPC found that Airbnb's retention of a copy of the complainant’s identity documentation after the successful completion of the verification process breached data minimisation and storage limitation principles contained within GDPR. Additionally, it found breaches related to the processing and retention of partially redacted and outdated identity documents that had been deemed inadequate or insufficient. The company has been ordered to take steps to remedy the breaches and prevent similar infringements from occurring in the future, including revising its internal policies and procedures concerning user identity verification.
Due to the cross-border nature of the data processing, the DPC concluded that its decision was subject to the cooperation and consistency mechanism under Article 60 of the GDPR. However, after the DPC received no applicable objections to its draft decision from the relevant data protection authorities within the statutory period, the DPC adopted its final decision.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 4,350 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.
