Replying to @riptari and @lilianedwards
I think it's worse because it doesn't have to be the DPC, it can be a real DPA instead
Replying to @henryfarrell
Ireland has a DPA? More seriously, I think that this might fall under ePrivacy, which would mean that this does not have to go through a supervisory authority. The @CNIL has been quite effective at doing that, and I don't think it's even far-fetched here.♥ 3
♥ 1