Microsoft Faces GDPR Compliance Burden in Xandr Class Action
Microsoft faces a significant challenge in defending itself against a class action lawsuit alleging unlawful data processing on its Xandr ad platform. The company would have to prove compliance with the EU's data protection law, according to a preliminary ruling by Ireland's High Court.
The Irish Council for Civil Liberties launched the class action suit against Microsoft, claiming that the tech giant controls personal data processed on its Xandr ad auctions and that it must comply with relevant obligations under the EU's General Data Protection Regulation (GDPR).
The court plans to give further directions and make final orders on the preliminary application on October 9. This ruling sets a significant precedent for Microsoft, which would have to provide evidence of compliance with the GDPR if the court determines that it is indeed responsible for processing personal data on its Xandr platform.