Former Meta lobbyist named DPC Commissioner: Meta now regulates itself (noyb.eu)

Niamh Sweeney, a former senior Meta lobbyist who spent over six years at the company (including 3.5 years as head of public policy at Facebook and later director of public policy for Europe at WhatsApp), is reported to join the Irish Data Protection Commission (DPC) as a commissioner in October. The DPC is the EU lead supervisory authority for many US Big Tech firms under the GDPR. The appointment has provoked sharp criticism because the DPC already faces accusations of being pro-business and ineffective: although it has issued large fines in theory, only about 0.6% of those fines have reportedly been collected. High-profile disputes involving Meta — including cases tied to Cambridge Analytica, a €390M penalty over consent, and a €1.2B cross‑border transfer fine — are on appeal, and critics note Sweeney would move from defending Meta to regulating those same issues. For the AI/ML community this raises practical and reputational stakes. If perceived regulatory capture accelerates, enforcement of GDPR rules that materially affect AI systems — lawful data collection/consent, cross‑border data transfers, and lawful basis for model training — could weaken or become more politically driven, increasing legal uncertainty. That could shift where and how companies source data, alter compliance strategies around Standard Contractual Clauses and transfer mechanisms, and influence competitive dynamics between EU and US firms. Even if enforcement remains robust, the appointment undermines trust in an independent regulator, which matters for data governance, cross-border research collaborations, and public confidence in AI systems built on personal data.