We are delighted that our Pause Before You appear video and campaign has been nominated in 2 categories at the Global Social Media Awards 2026. We have been nominated in the ‘Best Charity/Not-for-Profit Campaign’ and ‘Most Impactful Social Media Campaign’ !

📷 At large events it is advisable to have notices in place advising attendees of the intention to take photos etc. Our FAQs 👉 https://www.dataprotection.ie/en/faqs/topical-data-protection-issues/when-i-am-attending-public-event-can-organisers-take-promotional-photographs-me-without-my-consent

Under the GDPR, certain organisations are required to appoint a designated Data Protection Officer (DPO). Organisations are also required to publish the details of their DPO and provide these details to their national supervisory authority.

🔎 This complaint arose from a workplace investigation regarding allegations made by the complainant against a colleague and the subsequent access request they made. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/access-request-complaints/processing-context-workplace-investigation

Case Study 📋 Confidential Expressions of Opinion and Subject Access Requests: https://www.dataprotection.ie/en/dpc-guidance/case-studies/access-request-complaints/confidential-expressions-opinion-and-subject-access-requests#opinion

🌍 The transfer of personal data from the EU to outside the EU should not undermine the level of protection of the individuals concerned. Read our guide: https://www.dataprotection.ie/en/organisations/international-transfers/transfers-personal-data-third-countries-or-international-organisations

🔒 Organisations are required to report personal data breaches to the DPC where the breach presents a risk to the individuals affected, without undue delay. FAQ 🔗 https://www.dataprotection.ie/en/faqs/responsibilities-data-controllers/what-do-i-do-if-there-security-breach

📝 This blog examines the right of access under the GDPR and how the DPC handles complaints from individuals who are concerned that organisations have not addressed their Subject Access Requests appropriately. Take a look! www.dataprotection.ie/en/dpc-guida...

Lá Fhéile Pádraig Sona ón gCoimisiún um Chosaint Sonraí. Happy St. Patrick's Day from the Data Protection Commission. #LáFhéilePádraig #StPatricksDay

🔔 ☎️ Helpdesk Update. From Monday, 16 March our phonelines will be open weekdays between 9.30am – 1.00pm. All of our contact details are available here on our website here 👉 https://www.dataprotection.ie/en/contact/how-contact-us

❓ Ceisteanna Coitianta - Fianáin 🍪 Tá suíomh Gréasáin nó aip ag iarraidh orm toiliú le fianáin – cé na roghanna atá agam? ❓ FAQs - Cookies 🍪 I am being asked by a website or app to consent to cookies – what choice do I have?

Gach uair go roinneann tú a saol ar líne, tá tú i mbaol a sonraí pearsanta a roinnt leis an domhan. Déan machnamh roimh phostáil. #SeachtainNaGaeilge #PauseBeforeYouPost

Tá sé de cheart ag gach duine cosaint sonraí pearsanta a bhaineann leis nó léi: https://www.dataprotection.ie/ga/individuals/cearta-daoine-aonair-faoin-rialachan-ginearalta-um-chosaint-sonrai

🔔 ☎️ Helpdesk Update. From Monday, 16 March our phonelines will be open weekdays between 9.30am – 1.00pm. All of our contact details are available here on our website here 👉 https://www.dataprotection.ie/en/contact/how-contact-us

🎉 Wishing everyone a happy International Women’s Day from the Data Protection Commission

It was great to meet our Canadian colleagues Stephan Luciw and Harpreet Bains. Stephan and Harpreet work with the Information and Privacy Commissioner of Ontario @ipcontario.bsky.social and both made a visit to our Dublin office this week. A lovely opportunity to exchange ideas and perspectives!

Bhain an gearán seo le freagra, a líomhnaítear a bheith neamhiomlán, ar iarratas rochtana le haghaidh píosa scannáin TCI a rinne an gearánach chuig institiúid oideachais. 🔗 https://www.dataprotection.ie/ga/dpc-guidance/case-studies/access-request-complaints/rochtain-ar-phiosa-scannain-tci

Le linn Seachtain na Gaeilge, gheobhaidh tú níos mó eolais (as Gaeilge) maidir le bunrudaí cosanta sonraí, cearta daoine aonair faoin GDPR, agus feidhmiú do chearta, ag https://www.dataprotection.ie/ga/individuals

🔔 Latest News The Data Protection Commission Announces Conclusion of Inquiry into University of Limerick

The Data Protection Commission (DPC), as part of the Digital Regulators Group (DRG), welcomes the publication of Digital Ireland – Connecting our People, Securing our Future, the National Digital & AI Strategy 2030. 👉 dataprotection.ie/en/news-medi...

Topical FAQ 🙋 📷 There is nothing in the GDPR that prohibits people from taking photos in a public place. However, what you do with that photo can potentially become a data protection issue, e.g. if the photograph was sold for commercial gain or was posted publicly on a social media account.

Commissioner Des Hogan outlined our role in engaging and advising on AI systems from tech companies. Since 2021, we have engaged with approximately 180 AI products and services, often before reaching market. Commissioner Hogan’s remarks came during today’s Joint Committee on AI.

Join us for an information webinar on our 🛠️ Data Protection Toolkit for Schools, tailored for school leadership at primary and post-primary levels. This workshop will offer practical guidance and a space for common queries and challenges. ✍️ Register now at https://blackrockesc.ie/

📣The DPC welcomes the publication of the EDPB report on the implementation of its Coordinated Enforcement Framework (CEF) action on the right to be forgotten. For more: https://dataprotection.ie/en/news-media/latest-news/dpc-welcomes-publication-edpb-cef-implementation-report-right-be-forgotten

DPC Deputy Commissioner, Graham Doyle commenting on the announcement today of our inquiry into X Internet Unlimited Company (XIUC)

The Data Protection Commission (DPC) has opened an inquiry into X Internet Unlimited Company (XIUC) under section 110 of the Data Protection Act 2018

Any processing of personal data is only lawful where it has what is known as a ‘legal basis’. Some of the specific rights granted to data subjects under the GDPR only apply where processing is justified by particular legal bases. See our table for a quick guide!

Case Study 🔍 Use of a Personal Email in Work. 📩 This case study shows how strict rules should be in place prohibiting employees from sending work related correspondence to their personal email under any circumstances.

🚘📸 In many cases, data protection issues can arise for dash cam owners. This guidance aims to assist owners in understanding any obligations they may have under the GDPR. Using a dash cam? Have a read 👇 https://www.dataprotection.ie/en/dpc-guidance/guidance-drivers-use-dash-cams#Dash%20Cams

AI is a growing part of everyday life, for both young and old. This Safer Internet Day, we've put together 5 practical tips to help young people navigate AI safely. Download and share our new infographic created in collaboration with @cnam-ie.bsky.social #SaferInternetDay2026 #AIAware

Access requests should generally be 🆓 of charge. However, where requests are considered ‘manifestly unfounded or excessive’, the data controller may charge a reasonable fee. Learn more here 👉 https://www.dataprotection.ie/en/individuals/exercising-your-rights/what-will-it-cost

Case Study 🔍 This complaint concerned the processing of the complainant's personal data - details about a medical condition - by his employer, for the purpose of administering the complainant's sick leave and related payments. 👉 www.dataprotection.ie/en/dpc-guida...

📩📞 ➡️ ❓⚠️ It's important that data controllers remain vigilant of phishing and other social engineering attacks, such as email spoofing and fake websites to obtain sensitive info. Learn more: https://dataprotection.ie/en/dpc-guidance/guidance-organisations-phishing-and-social-engineering-attacks

🗣️ Our regional events for Irish school leaders continue! This week, DPC colleagues Georgeta Botas and Emer Bennett delivered a presentation on our 🛠️ Data Protection Toolkit for Schools in the Limerick Education Centre. Thank you for a productive and engaged session!

🎉 Today is Data Protection Day 2026. To mark the occasion we've produced a new infographic on 'Sharenting', the topic of our Pause Before You Post campaign which launched last year. Take a look and share 👇

Reminder about our workshop on the DPC's 🛠️ Data Protection Toolkit for Schools this Wednesday, 28 January in the Donegal Education Support Centre.

📞"Can I talk to the account holder?" The GDPR shouldn't be used as a barrier to prevent accessibility and discriminate on the basis of disability. Our blog post👇 https://dataprotection.ie/en/dpc-guidance/blogs/can-i-talk-account-holder-contacting-organisations-behalf-someone-else

🙌 The DPC were delighted to welcome delegates from the Dutch and Luxemburg DPAs who attended a case handling workshop in our Dublin offices today.

Join us for an information webinar on our 🛠️ Data Protection Toolkit for Schools, tailored for school leadership at primary and post-primary levels. This workshop will offer practical guidance and a space for common queries and challenges. ✍️ Register now at https://blackrockesc.ie/

🤝 Commissioners Des Hogan and Niamh Sweeney met with the Austrian Commissioner for Data Protection, Dr Matthias Schmidl, and Deputy Commissioner Elisabeth Wagner, at an event marking the 45th anniversary of the Austrian Data Protection Authority in Vienna last week.

🔍 Case Study Concerning the processing of health data of a member of an income protection insurance scheme, by a third party, whose involvement in the claim was not known to the complainant. Read 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/transparency/processing-health-data

Join us for an information session on our 🛠️ Data Protection Toolkit for Schools, tailored for school leadership at primary and post-primary levels. This workshop will offer practical guidance and a space for common queries and challenges. ✍️ Register on the relevant Education Centre's website.

Case Study 🔍 This complaint concerned a refusal to comply with an erasure request. The complainant stated they were identified in a review posted online relating to their place of work. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/erasure/right-erasure-and-user-generated-content

Data Collection and Retention Policies - An organisation should always know what data it holds, where it is held and how it flows through the organisation. Read our guide on Data Security here: https://www.dataprotection.ie/en/organisations/know-your-obligations/data-security-guidance

You have a limited Right of Restriction to processing of your personal data . This data can be stored by the data controller, but most other processing actions will require your permission. Read more 👉 https://www.dataprotection.ie/en/individuals/know-your-rights/right-restriction-article-18-gdpr

🎉 Happy New Year to all from the Data Protection Commission!

🎅 Gifted or received a Dash Cam at Christmas? It's important that drivers who install dash cams of all different types understand their potential obligations under data protection law. Read our guidance on dash cams: https://dataprotection.ie/en/dpc-guidance/guidance-drivers-use-dash-cams

🎄 Wishing you all a very Merry Christmas, from the Data Protection Commission!

Retailers offering e-receipts to customers this Christmas: We've produced guidance to assist you to adhere to best practice in relation to e-receipts and electronic direct marketing. Know your obligations! https://www.dataprotection.ie/en/dpc-guidance/guidance-retailers-issuing-e-receipts

🎅 Make sure you’re on the DPC nice list this year and know your data protection obligations as an organisation! Take a look at our chart for the legal bases for processing personal data 👉 https://dataprotection.ie/en/organisations/data-protection-basics/principles-data-protection