Replying to @henryfarrell
Ireland has a DPA?
More seriously, I think that this might fall under ePrivacy, which would mean that this does not have to go through a supervisory authority. The @CNIL has been quite effective at doing that, and I don't think it's even far-fetched here.
♥ 3