Johnny Ryan
@johnnyryan.bsky.social
4.2K followers 2.2K following 290 posts
Director of ICCL Enforce http://Enforce.ie. Previously Chief Policy Officer of Brave. FRHistS. https://ie.linkedin.com/in/johnnyryan1
Posts Media Videos Starter Packs
johnnyryan.bsky.social
The U.S. FTC chair said that ICCL's report on the national security threat of RTB data was the impetus for the FTC's investigation and enforcement against the data broker Mobilewalla collecting RTB location data www.iccl.ie/digital-data...
johnnyryan.bsky.social
The DPC is even contradicted by RTB's own technical specification.
Note latitude, longitude, GPS data, IP address, etc...
github.com/InteractiveA...
github.com
johnnyryan.bsky.social
The DPC is also contradicted by the U.S. Federal Trade Commission.
The recent FTC decision on notorious data broker "Mobilewalla" states plainly that data brokers collect location data from RTB.
www.ftc.gov/policy/advoc...
Unpacking Real Time Bidding through FTC’s case on Mobilewalla
The FTC recently
www.ftc.gov
johnnyryan.bsky.social
In fact European authorities - including the DPC - have confirmed that RTB does indeed expose people’s location data and movements to data brokers in a binding Article 60 Decision.

See Art 60 Decision of 2/2/2022, EDPB, para 515 www.edpb.europa.eu/system/files...
johnnyryan.bsky.social
We told the DPC about this. It has known for years.
But yesterday it released this in a statement - perhaps in an attempt to absolve itself from the location scandal shown on national TV recently.
The statement is incorrect.
johnnyryan.bsky.social
Screenshot from their website shows where a person is, and where they were on what previous days.
Google and other major RTB players are shown as sources for their worldwide data.
www.iccl.ie/wp-content/u...
johnnyryan.bsky.social
After 8 years of inaction, the DPC now claims that RTB adtech does not provide location data to dodgy firms.
Wrong.
Meet "Patternz" for example:
An Israeli surveillance tool built on RTB data that provides a targeted individual's coordinates and "driving path" www.iccl.ie/wp-content/u...
johnnyryan.bsky.social
So many examples of these data being dangerous
johnnyryan.bsky.social
resources are not necessarily the problem bsky.app/profile/john...
johnnyryan.bsky.social
The Data Protection Commission has cost the Irish taxpayer €162.3 million since it was first informed of the RTB data breach in 2017.

See table --> www.iccl.ie/wp-content/u...
johnnyryan.bsky.social
This is madness. Our data are being broadcast at enormous scale, to countless parties, without any security. It is time to enforce against the central RTB players.

Read our report on why this is a national security crisis --> www.iccl.ie/digital-data...
Europe's hidden security crisis
How data about European defence personnel and political leaders flows to foreign states and non-state actors
www.iccl.ie
johnnyryan.bsky.social
And he says the DPC says it has started to investigate a single data broker concerned, and contacted another authority too.
johnnyryan.bsky.social
And he says people should stop clicking consent spam popups - despite the fact that one can not lawfully obtain consent to a data free-for-all.
johnnyryan.bsky.social
But his answer is not to rebuke the DPC's refusal to act on RTB since 2017. Instead he says people should switch off location on their phones (immaterial if IP address is used for location);
johnnyryan.bsky.social
This peculiar and alarming.

Labour leader @ivanabacik.bsky.social Ivana Bacik asks Justice Minister Jim O'Callaghan what he has done to ensure the DPC finally acts against the data free-for-all that sends people's movements to countless data brokers.

vimeo.com/1124123069?f...
Irish Minister for Justice asked about RTB data by Labour Leader in Parliament
1 October 2025 source https://video.oireachtas.ie/hourly/dail/dail_20251001T1200.mp4
vimeo.com
johnnyryan.bsky.social
Arthur Schlesinger Jr. in 1948

"The only hope lay in the revival of democracy as a fighting faith"

archive.nytimes.com/www.nytimes....
johnnyryan.bsky.social
In 2020 we handed the Minister for Justice & DPC evidence that that data on Irish victims of sexual abuse, of HIV/AIDS, and others were for sale from data brokers.

We warned that the DPC's refusal to act against the Real-Time Bidding data source since 2017 was the cause.
www.iccl.ie/wp-content/u...
johnnyryan.bsky.social
New paper from OpenAI reportedly acknowledges that incorrect assertions are inevitable even with perfect data (I say reportedly because I have not read the paper yet)

arxiv.org/pdf/2509.04664
arxiv.org
johnnyryan.bsky.social
Cantillon in the mornings Irish Times
johnnyryan.bsky.social
This problem requires no new law. It requires a better DPC.

bsky.app/profile/john...
johnnyryan.bsky.social
"Should a significant national security incident now occur as a result of RTB data we will be obliged to make this correspondence public and clarify where responsibility lies."

That day has arrived.
johnnyryan.bsky.social
The issue is not that people don't read terms and conditions.

1. The massive data free-for-all in online ads ("RTB") makes it impossible to obtain lawful consent. (See industry admission that RTB is incompatible with consent)

2. The DPC knew all of this since 2017 and refused to act.