Airbnb Ireland retention of identity document copies decision

Incidente

The Irish Data Protection Commission examined a complaint concerning copies of identification documents retained by Airbnb Ireland following verification of a customer account. The regulator considered whether retaining those copies in the circumstances was proportionate and consistent with the GDPR storage-limitation and data-minimization framework. In a June 21, 2023 decision, the commission issued a reprimand and directions on the relevant processing practices. This matter is distinct from the later January 2024…