Note, on pages 18-19 which applies to many Hosts and which one may reasonably expect to be relevant and applicable in relation to Host Payouts that have been 'Paused' for whatever reasons and where there's a lack of Due Diligence been undertaken by ABB it's Customer Services etc.
Airbnb's Tech Team Templates need urgent attention for the betterment of all as it is impacting on all of our Reputations.
Airbnb need to do address there problematic RoadMaps that Artificial Intelligence is pursing and causing disruption to previously harmonious relationships in our Communities.
https://www.dataguidance.com/news/ireland-dpc-imposes-corrective-measures-and-reprimand
Ireland: DPC imposes corrective measures and reprimand on Airbnb for infringement of principle of data minimisation
The Deputy Commissioner of the Data Protection Commission ('DPC') announced, on 13 January 2023, via LinkedIn, the publication of the final decision, as issued on 14 September 2022, in which it imposed a reprimand and corrective measures on Airbnb Ireland UC for violations of Articles 5(1)(c), 6(1) and 12(3) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), following an individuals complaint.
Background to the decision
In particular, the DPC noted that the inquiry was commenced following a complaint that Airbnb failed to comply with an erasure request and a subsequent access request within the statutory timeframe. Furthermore, the DPC provided that when the complainant submitted their request for erasure, Airbnb requested that they verify their identity by providing a photocopy of their ID which they had not previously provided to Airbnb.
Findings of the DPC
Further to the above, the DPC highlighted that its decision was submitted to the supervisory authorities concerned for their opinion pursuant to Article 60 of the GDPR and no objections were raised by the other concerned supervisory authorities.
In addition, the DPC found the following infringements:
- Airbnb's requirement that the complainant verify their identity by way of submission of a copy of their photographic ID constituted an infringement of the principle of data minimisation, pursuant to Article 5(1)(c) of the GDPR.
- The infringement occurred in circumstances where less data-driven solutions to verify identity were available to Airbnb.
- In the specific circumstances of the complaint, the legitimate interest pursued by Airbnb does not constitute a valid lawful basis under Article 6 of the GDPR for seeking a copy of the complainant's photographic ID in order to process their erasure request.
- Airbnb infringed Article 12(3) of the GDPR with respect to its handling of the complainant's access request. The infringement occurred when Airbnb failed to provide the complainant
- with information on the action taken on their request within one month of the receipt of the access request.
-
Outcomes
In conclusion, the DPC imposed on Airbnb a reprimand pursuant to Article 58(2) of the GDPR. In addition, the DPC ordered Airbnb, pursuant to Article 5(1)(c) of the GDPR, to revise its internal policies and procedures for handling erasure requests to ensure that individuals are no longer required to provide a copy of photographic ID when making erasure requests, unless Airbnb can demonstrate a valid legal basis for doing so.
-
You can read the LinkedIn post here and the inquiry and decision here.
-
-
@Bhumika- @Jenny4 @Paula
- @Francesca
- @Sybe
@Quincy
@Stephanie