The Irish Supreme Court has granted permission for a leapfrog appeal concerning the Data Protection Commission’s (DPC) €310 million fine against LinkedIn, bypassing the Court of Appeal to address significant questions regarding the regulator’s constitutional authority. The case centers on whether the DPC, in imposing the October 2024 penalty for GDPR breaches, acted within its limited judicial functions under the Irish Constitution.
Supreme Court to Review Regulatory Powers
A three-judge panel determined that the dispute involves matters of general public importance, meeting the high threshold required for a direct Supreme Court hearing. The court noted that the proceedings will likely influence the approach to other statutory appeals, particularly given the DPC’s role as the Lead Supervisory Authority for GDPR enforcement across the European Union.
The legal challenge originated after the DPC imposed the €310 million fine following a complaint initially filed by a French non-profit organization. The court emphasized that the case impacts a massive user base, noting that LinkedIn’s subscriber count reaches into the hundreds of millions and the number of individuals affected by the identified GDPR infringement was "very significant indeed."
Constitutional Challenges to the 2018 Data Protection Act
Following the DPC’s decision, the Microsoft-owned professional network initiated judicial review proceedings in the High Court. LinkedIn argues that the commission’s power to issue such severe fines and reprimands exceeds the limited functions of a non-judicial body. The firm contends that specific sections of the 2018 Data Protection Act are inconsistent with the Constitution, the Charter of Fundamental Rights, and the State’s obligations under the European Convention on Human Rights.
In April, the High Court issued a judgment on several preliminary issues within these proceedings. The Supreme Court will now review three of those specific findings, while LinkedIn has also sought to bring a cross-appeal on an additional preliminary matter. The State was previously permitted to participate in the High Court proceedings, underscoring the broader significance of the constitutional questions raised by the dispute.
Frequently Asked Questions
Why is this case being heard directly by the Supreme Court?
The Supreme Court granted a "leapfrog" appeal because the issues raised are of general public importance and will likely set a precedent for future statutory appeals involving the DPC’s regulatory powers under the GDPR.
What is the core of LinkedIn’s legal argument?
LinkedIn alleges that the DPC, by imposing such a substantial fine, exercised powers of a judicial nature that it is not constitutionally permitted to hold. The company is challenging the validity of the 2018 Data Protection Act in relation to these enforcement powers.
Who initiated the original complaint against LinkedIn?
The initial complaint that led to the DPC’s investigation and the subsequent €310 million fine was brought forward by a French non-profit organization.
Related reading