Data Protection Commission Ireland
@dpcireland
Ireland's independent supervisory authority for data protection. Social Media Policy: Queries/Complaints:
📸 In general, the GDPR does not prohibit people from taking photos or video in a public space, provided you are not harassing anyone. However, what what you do with that photo can potentially become a data protection issue e.g. if it was shared publicly on social media or used for commercial gain.
🗃 Case Study This complaint concerned an alleged incomplete response to a subject access request for CCTV footage. It was made by the complainant to an educational institution, regarding an alleged attempted assault. 👉 www.dataprotection.ie/en/dpc-guida...
🔒 The GDPR provides extra protection for certain categories of personal data, called “special category data”. ❌ These categories of personal data shall not be processed unless a controller can avail of one of the exceptions under Article 9(2) of the GDPR.
🗒️ This guide and checklist is to assist the Small and Medium Enterprise (SME) sector, who may not have access to extensive planning and legal resources, to prepare for a business future that is data-protection compliant. Take a look 👉 www.dataprotection.ie/en/dpc-guida...
🏦 Banking & Insurance Sector FAQs Financial institutions are legally obliged under Anti-Money Laundering legislation to carry out Politically Exposed Persons screenings where there is a 'reasonable risk' of money laundering and terrorist financing. Read 👇 www.dataprotection.ie/en/faqs/bank...
Case Study 🔎 A data subject contacted the DPC as they were not satisfied with the responses to an access and erasure request. This case was against a debt collector and the data subject raised concerns about how their personal data was obtained. 👉 www.dataprotection.ie/en/dpc-guida...
⚖️ This table gives a general outline of which rights could be applicable when personal data are processed under the different legal bases under the GDPR. 💡 Learn more: Guidance on Legal Bases 🔗 www.dataprotection.ie/en/dpc-guida... Your Rights under the GDPR 🔗 www.dataprotection.ie/en/individua...
🧩 Every action you take can form part of an overall jigsaw of your online activity and tells a story about you. Be aware of how to manage your digital footprint by reading our blog post ✍️ https://www.dataprotection.ie/en/dpc-guidance/blogs/managing-your-digital-footprint
Case Study 🔎 A public figure published a copy of an email on their social media with a journalist's name and contact details legible. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/disclosure-unauthorised-disclosure/disclosure-journalists-name-and-mobile-phone-number-public-figure
Data protection notices, or 'Privacy Policies', explained. How do I make a Privacy Policy? 🔗 www.dataprotection.ie/en/faqs/resp...
Last week, the DPC launched its Annual Report for 2025 at a press conference in our Dublin offices. Commissioners for Data Protection, Dr Des Hogan, Mr Dale Sunderland and Ms Niamh Sweeney detailed the significant work of the office throughout the year. ▶️ Take a look back on the day!
🫶 As part of Disability Pride Month, we were delighted to welcome CJay Smith, Assistive Technology & Communications Specialist at Neurodiversity Ireland, to speak at a staff event on supporting neurodiversity in the workplace. Thanks again to CJay for the engaging and informative session!
🙌 Join our team! The DPC currently has several vacancies for Legal Analysts. The role offers a unique and exciting opportunity to embrace new challenges, do purposeful work and make a real difference to the Irish State. Learn more here 👇 dataprotection.ie/en/careers/l...
▶️🗣️ Deputy Commissioner Graham Doyle on today's publication of the DPC Annual Report for 2025. 🔵 The DPC received 16,160 new cases in 2025 🟠 Total valid breach notifications received was 6,521 🟡 The DPC finalised 4 large-scale inquiries and imposed fines totalling just over €530m
🔔 To coincide with the publication of our 2025 Annual Report, the Data Protection Commission has also released the results of an independent survey on the practice of “Sharenting”. Read more 👉 dataprotection.ie/en/data-prot...
📢 Data Protection Commission publishes its Annual Report for 2025. Read the press release and full report on our website 👉 dataprotection.ie/en/data-prot...
🎉 Tomorrow is #MSMEDay2026 raising awareness of the tremendous contributions of micro, small and medium-sized enterprises! The DPC has a variety of resources available supporting MSMEs, including infographics, guidance, blogs and podcasts. Visit: https://www.dataprotection.ie/en/dpc-guidance
🤝 Commissioner Des Hogan was delighted to meet with Waldemar Gonçalves Ortunho Junior, Director-President of the Brazilian National Data Protection Authority, on the sidelines of the IAPP Leadership Summit in New Hampshire earlier today.
In this blog post, we aim to clarify what information is appropriate for schools to request during the pre-enrolment stage, and to support schools in taking a proportionate and compliant approach to personal data processing from the outset. Read 📖 www.dataprotection.ie/en/dpc-guida...
🔔 Our website will be offline for scheduled maintenance between 11am and 11.30am today, 18 June. Any organisations who need to report a breach of personal data during this time will be able to use the email address provided on our website holding page during this maintenance.
🗣️ Last week, Deputy Commissioner Ian Chambers delivered a keynote address at a DLA Piper event in their Dublin offices: "Cyber Risk, Data Protection and the New Regulatory Landscape". He was joined on a panel by Paul Stanley, Head of Engagement at Ireland's National Cyber Security Centre.
💬 Deputy Commissioner Graham Doyle on our decision announced today, which followed an inquiry into a ransomware attack on the laboratory information system in Midlands Regional Hospital Tullamore, County Offaly.
✍️ NEW DECISION The DPC has announced its final decision following an inquiry into a ransomware attack on the laboratory information system in Midlands Regional Hospital Tullamore, County Offaly. Read more 👇 www.dataprotection.ie/en/news-medi...
Check out our comprehensive guide to cookies and other tracking technologies: 🍪 dataprotection.ie/en/dpc-guida... 🍪 Our guidance goes through the different types of cookies and their purpose, the law around cookies and consent, as well as the requirements for cookie banners, and more.
🔎 Case Study This complaint concerned an access request to a bank which allegedly didn't provide internal analyses relating to the bank's credit assessment. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/access-request-complaints/access-information-relating-banks-credit-assessment
Frequently Asked Questions: Does the GDPR apply to deceased persons❓ 🚫 The GDPR does not apply to the personal data of deceased persons. Therefore, the DPC are not in a position to progress matters which relate to the personal data of a deceased individual as it falls outside data protection law.
ℹ️ The GDPR's One Stop Shop mechanism explained! Take a look at our guide and find out more on our website 👉 www.dataprotection.ie/en/organisat...
🤝 Join our team! The Data Protection Commission currently has a vacancy for the role of Senior Litigation Lawyer (Assistant Principal Higher). For more information and how to apply, visit the Careers page of our website 👉 www.dataprotection.ie/en/who-we-ar...
🗣️ Deputy Commissioner Graham Doyle was delighted to present alongside the French DPA (CNIL) at the Council of Europe's Second European Forum on Digital Citizenship Education in Strasbourg today ☀️
🔑 The GDPR sets out seven key principles related to the processing of personal data, which controllers need to be aware of and comply with when collecting and otherwise processing personal data. Learn more 🔗 www.dataprotection.ie/en/individua...