Investigation reveals sale of precise phone movement data in Ireland
An undercover RTÉ Prime Time investigation found that minute-by-minute smartphone location records for tens of thousands of devices in Ireland are being sold by data brokers. The dataset reviewed by journalists showed precise movement traces that could be linked to individual residential addresses after visits to high-security sites such as prisons, military bases and Leinster House, as well as to sensitive healthcare locations. RTÉ chose not to identify people shown in the data for privacy reasons, but confirmed that the dataset allowed tracing daily routines, routes and times devices arrived and left private homes.
The investigation obtained a sample containing two weeks of movement data for 64,000 phones, which was supplied free to journalists posing as a newly formed data analytics and marketing firm. Sellers said the same information could be supplied as an ongoing feed with a 24–72 hour delay. They defended sales by noting that device owners were not named and that app terms and conditions purportedly authorized the sharing of location data. Regulators and security experts have raised alarm about the implications for individual privacy and for national security.
Public figures and security specialists expressed concern about the ease of re-identifying users from supposedly anonymized datasets. One person who works in Leinster House confirmed the dataset accurately reflected their routines, including routes, supermarket visits and times at home. Former military and intelligence figures called for stronger regulatory guardrails and oversight to prevent exploitation of location data that can reveal sensitive patterns of life.
The Data Protection Commission (DPC) said it is “extremely concerned” and is working to identify the broker involved; it warned that location information can pose serious risks to security and wellbeing and said it would take action if the company is headquartered in Ireland. The RTÉ report highlights gaps between app consent practices, data broker markets and effective enforcement under EU data protection law, and it underscores the urgent need for clearer safeguards and regulatory action.
