Skip to content

Ireland's ex-data privacy chief joins law firm that defended Meta against her agency

A decade enforcing GDPR against Big Tech—now she's on their side. Critics call it a conflict of interest that erodes trust in regulation.

The image shows a computer screen with a message that reads "This Hidden Site Has Been Seized" and...
The image shows a computer screen with a message that reads "This Hidden Site Has Been Seized" and a logo of the Dutch National Police. The logo is a shield with a blue background and a white star in the center. The text is written in a bold, black font and is surrounded by a white border.

Ireland's ex-data privacy chief joins law firm that defended Meta against her agency

Helen Dixon, who led Ireland's Data Protection Commission (DPC) for a decade, has joined a law firm that previously defended Meta against her own agency. The move follows years of criticism over her handling of major GDPR cases, including a €1.2 billion fine against Meta in 2023. Privacy activists have raised concerns about conflicts of interest and the impact on public trust.

Dixon served as Ireland's data protection chief from 2014 until February 2024. During her tenure, the DPC became a key enforcer of the EU's GDPR, overseeing cases against tech giants like Meta, Google, and Apple. Many of these companies have their European headquarters in Ireland, giving the DPC a central role in cross-border enforcement.

The DPC issued some of the largest GDPR fines, including €1.2 billion against Meta in 2023 for US data transfers and €530 million against TikTok in 2025 for transfers to China. However, most fines remain under appeal, meaning only a fraction has been collected. Critics argue that, despite the high nominal sums, the DPC's enforcement has been slower and less decisive than in other EU countries, such as France, Germany, and Spain, where regulators confirm and enforce penalties more swiftly.

Dixon's leadership faced repeated scrutiny. Privacy activist Max Schrems had to sue the DPC three times to push for action against Meta, culminating in the record fine. Schrems and others accused Dixon of delays, weak enforcement, and even acting in Big Tech's interests. Now, her move to Mason Hayes & Curran—a firm that has represented Meta in legal battles against the DPC—has reignited these concerns.

Schrems and other activists argue that the appointment undermines trust in regulatory institutions. They claim it raises questions about the revolving door between regulators and the companies they oversee.

Dixon's transition to a law firm representing Meta comes after a decade of overseeing GDPR enforcement against the same company. While the DPC imposed some of the EU's largest fines, the delays and appeals have left many penalties uncollected. The move has intensified debates about regulatory independence and the effectiveness of Ireland's data protection oversight.

Read also:

Latest