The increase of data-driven M&A transactions have raised apprehension over potential violations of data privacy rights. The economic significance attributed to Big Data has also called into question whether data privacy could be a parameter in merger control proceedings. Our purpose is to address the privacy and monopoly concerns arising from data-driven transactions within the scope of both the EC Regulation and the purpose limitation principle under the GDPR.