Johnny Ryan
After 8 years of inaction, the DPC now claims that RTB adtech does not provide location data to dodgy firms.
Wrong.
Meet "Patternz" for example:
An Israeli surveillance tool built on RTB data that provides a targeted individual's coordinates and "driving path"
https://www.iccl.ie/wp-content/uploads/2025/10/PATTERNZ-NATIONAL-SECURITY-PATTERN-DETECTION.pdf
Oct 7 at 8:52amWeb
Show threadJohnny RyanOct 7
Screenshot from their website shows where a person is, and where they were on what previous days.
Google and other major RTB players are shown as sources for their worldwide data.
https://www.iccl.ie/wp-content/uploads/2025/10/screencapture-isasecurity-org-patternz-2021-06-22-14_12_33.png
Show threadJohnny RyanOct 7
We told the DPC about this. It has known for years.
But yesterday it released this in a statement - perhaps in an attempt to absolve itself from the location scandal shown on national TV recently.
The statement is incorrect.
Show threadJohnny RyanOct 7

In fact European authorities - including the DPC - have confirmed that RTB does indeed expose people’s location data and movements to data brokers in a binding Article 60 Decision.

See Art 60 Decision of 2/2/2022, EDPB, para 515
https://www.edpb.europa.eu/system/files/2022-03/be_2022-02_decisionpublic_0.pdf

Show threadJohnny RyanOct 7
The DPC is also contradicted by the U.S. Federal Trade Commission.
The recent FTC decision on notorious data broker "Mobilewalla" states plainly that data brokers collect location data from RTB.
https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/12/unpacking-real-time-bidding-through-ftcs-case-mobilewalla
Unpacking Real Time Bidding through FTC’s case on Mobilewalla

The FTC recently 

Federal Trade Commission
Show threadJohnny RyanOct 7
The DPC is even contradicted by RTB's own technical specification.
Note latitude, longitude, GPS data, IP address, etc...
https://github.com/InteractiveAdvertisingBureau/openrtb2.x/blob/main/2.6.md#objectgeo
openrtb2.x/2.6.md at main · InteractiveAdvertisingBureau/openrtb2.x

OpenRTB 2.x specification, from 2.6 onward. Contribute to InteractiveAdvertisingBureau/openrtb2.x development by creating an account on GitHub.

GitHub
Show threadJohnny RyanOct 7
The U.S. FTC chair said that ICCL's report on the national security threat of RTB data was the impetus for the FTC's investigation and enforcement against the data broker Mobilewalla collecting RTB location data.
https://www.iccl.ie/digital-data/ftc-acts-against-rtb-company-mobilewalla/
Show threadvmaurinOct 7
@johnnyryan RTB is the protocol (and yes, position data are part of the specifications), but all this tracking is made possible by the people that decided to collect your geo data for money. Basically, you can be sure that all free apps on your phone that have an access to your position WILL send these to advertiser, using RTB protocol. So to solve this problem at core, geo location on a phone should be highly protected (but that is not in Google/Apple interest)
Show thread@PrivacyMattersOct 7
@johnnyryan the DPC clearly doesn’t understand the tech involved in RTB and nor that CellIDs are temporarily stored on users mobile devices & that apps may access that info that allows for coarse location tracking. CellIDs are mapped in many many countries.
Show threadPatrick LeavyOct 7

@johnnyryan it's a massive scandal. And you're doing amazing work to bring it to light!

It must be exhausting to keep saying this, keep being ignored, and keep being right 😞

I think a major documentary is needed to give this primetime attention. I'll see if I can find a film maker brave enough!

Show threadJohnny RyanOct 7
@patrickleavy that is very kind. Become a member of ICCL and support us?
Show threadPatrick LeavyOct 7

@johnnyryan I will 😁

Do you think the ICCL would be able to attract funding if such a documentary was to be made?

Show threadJohnny RyanOct 7
@patrickleavy good man. Maybe?
Show threadGerard Cunningham ✒️Oct 7
@johnnyryan DPC is a bad joke