🔍 Case Study Following an access request, the complainant alleged that a bank had failed to provide them with any personal data used in a credit assessment. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/access-request-complaints/access-information-relating-banks-credit-assessment

🚨 Make sure to register for our Data Protection Basics information session for Local Community Groups, Non-Profits and Social Enterprises in Cork. Book your place through Cork City Partnership now! 🔗 corkcitypartnership.ie/2025/09/6414/

🤝 Delighted to meet with Australian Privacy Commissioner Carly Kind at the #GPA Global Privacy Assembly 2025 in Seoul to discuss how our offices can support each other’s work in relation to protecting children online!

The DPC team are at Croke Park today hosting a stand at the Joint Managerial Body Education Conference 2025 to promote our Data Protection Toolkit for Schools 👉 www.dataprotection.ie/en/dpc-guida... 👋 Pop over and say hello if you're at the conference!

Statement from the DPC regarding RTÉ's Prime Time Investigation

🏆 The DPC was honoured to be shortlisted for an award under the enforcement category of the Global Privacy Assembly #GPA Awards for our work in relation to CCTV use in County Councils!

✍️ The DPC were delighted to reaffirm their commitment to implementing trustworthy data governance frameworks that promotes innovative and privacy-protecting AI at the Global Privacy Assembly in Seoul.

🤝 The DPC met with US Federal Trade Commissioner Melissa Holyoak today at the Global Privacy Assembly in Seoul. Protecting the privacy of children online remains a priority on both sides of the Atlantic.

Day 3 of #GPA Chairperson Des Hogan spoke on a panel today on “Mechanisms and Policy Instruments to Support AI Innovation” alongside @jtrevorhughes.bsky.social (CEO, @iapp.bsky.social), Bertrand du Marais (Commissioner, CNIL), Stefano Fratta (VP, Meta) and Yeonjea Kim (Chief Privacy Officer, Kakao)

📢 Latest News! The DPC welcomes today's announcement by Government of the appointment of Ms. Niamh Sweeney as Commissioner for Data Protection.

We are back for Day 2 at the #Ploughing2025 Championships! This morning we are being kept company by our beautiful neighbour, Customs dog, Casey. 🐶 Pop down to stand 276 to meet our team (and Casey)

In collaboration with Cork City Partnership, we'll be hosting an info session on Data Protection Basics for Local Community Groups in Cork City. Join us on Tuesday, 23 September at 11.30am at the Wellness Room in the Glen Resource Centre. Book your place 👉 corkcitypartnership.ie/2025/09/6414/

👏 DPC Commissioners Des Hogan and Dale Sunderland are delighted to welcome the DPC’s new Director of Legal Affairs, Deirdre O’Donovan, as she starts in her new role.

Day 2 of #GPA Global Privacy Assembly in Seoul continues: 🤝 Delighted to meet with EU Commissioner @michaelmcgratheu.bsky.social who gave the keynote address at the GPA this afternoon.

We are delighted to be at the National #Ploughing2025 Championships! It’s a beautiful morning here in Offaly ☀️ Come visit the DPC team and stand - we are at stand 276 in the Government of Ireland village!

Commissioner Dale Sunderland addressing the #GPA in Seoul on “Lawful Bases for Processing Personal Data for AI” alongside Bojana Bellamy, President @thecipl.bsky.social, Anu Talus, Chairperson of the EDPB, Beatriz Anchorena, Commissioner for AAIP (Argentina) and ByoungPil Kim, Professor at KAIST.

The DPC Commissioners were delighted to meet the Privacy Commissioner of Canada at the Global Privacy Assembly this afternoon in Seoul to discuss ongoing cooperation between our authorities.

We're all set for the National Ploughing Championships tomorrow! We're looking forward to welcoming you at our exhibition stand in the Government of Ireland Village. Find us at Block 3, Row 14, Stand 276 throughout the week. #Ploughing2025

We were delighted to meet with the Irish Ambassador, Michelle Winthrop this morning at the Global Privacy Assembly in Seoul. We discussed the importance of the adequacy decision for personal data transfers between the EU and the Republic of Korea

The full decision from our inquiry into the use of facial matching technology in connection with the Public Services Card by the Department of Social Protection, concluded in June of this year, is now available to download from our website. 🔗 www.dataprotection.ie/en/dpc-guida...

You have the right to request a copy of any of your personal data which is being processed by data controllers. These requests are referred to as Data Subject Access Requests. Know your rights, read here 👉 https://www.dataprotection.ie/en/individuals/know-your-rights/right-access-information

📅 1 Week to Go! Join us at the DPC exhibition stand in the Government of Ireland Village at the National Ploughing Championships 2025, taking place from 16-18 September. We hope to see you there! #ThinkDataProtection #Ploughing2025

🔎 Case Study The complainant in this case alleged that a regulatory body had inaccurately recorded personal data relating to them in the minutes of a meeting and in a letter to a third party. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/accuracy/data-accuracy

📋 Our self-assessment checklist tool can help map the personal data that you currently hold/process and identify where immediate remedial actions are required in order to be compliant with the GDPR. 👉 https://dataprotection.ie/en/organisations/resources-organisations/self-assessment-checklist 👈

Under the GDPR, the Right to be Informed means that you should be made aware of risks, rules and safeguards in relation to the processing of your personal data. Know your rights 👉 https://www.dataprotection.ie/en/individuals/know-your-rights/right-be-informed-transparency-article-13-14-gdpr

📝 This blog goes through what to do if you find out that your personal data is being used by unauthorised third parties, and how to recognise and reduce those risks in the first place. Read 🔗 https://www.dataprotection.ie/en/dpc-guidance/blogs/when-your-personal-data-has-been-affected-breach

We're often asked about the information that prospective tenants can be legally asked to provide. This guidance helps explain what may be appropriate to request in an application for a residential tenancy. 🏡 https://www.dataprotection.ie/en/dpc-guidance/requesting-personal-data-prospective-tenants

📢 We've launched a brand new Case Studies section on our website! This page breaks down example cases into searchable, easy-to-navigate categories which illustrate how data protection law is applied. Take a look 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies

Earlier this week we attended the annual ATEE conference, hosted by the Marino Institute. Emer and Tara were there to highlight our Data Protection Toolkit for Schools which helps schools meet their data protection obligations. Read the document here 👉 dataprotection.ie/sites/def...

🏫👨‍👧‍👦 Before collecting personal data at the pre-enrolment stage, schools should assess whether the information being requested is necessary and appropriate Find out more here https://dataprotection.ie/en/dpc-guidance/blogs/processing-personal-data-during-pre-enrolment-what-schools-need-know

📚 Case Study Disclosure by a credit union of a member’s personal data to a private investigations firm. 👉 https://www.dataprotection.ie/en/dpc-guidance/case-studies/disclosure-unauthorised-disclosure/disclosure-credit-union-members-personal-data-private-investigations-firm

🤝 Data Processing Contracts 🤝 This guidance outlines the obligations on controllers and processors who enter into a data processing contract and what should be included in such a contract. Read: https://www.dataprotection.ie/en/dpc-guidance/practical-guide-controller-processor-contracts

👩‍👩‍👧 Fundamental 7 - Let Children Have Their Say 👉 https://www.dataprotection.ie/en/dpc-guidance/fundamentals-child-oriented-approach-data-processing Online service providers shouldn’t forget that children are data subjects in their own right and have rights in relation to their personal data

When carried out effectively, anonymisation and pseudonymisation can be used to protect the privacy rights of individuals... but what's the difference between them❓ Read: https://www.dataprotection.ie/en/dpc-guidance/anonymisation-and-pseudonymisation

This guidance is aimed at helping parents/legal guardians understand their children’s rights in a variety of settings, separate to an online environment. Read here 🔗 https://dataprotection.ie/en/dpc-guidance/children-parents-and-data-protection-can-i-make-complaint-behalf-my-child

This complaint was from the parent of a child whose health data was mistakenly disclosed to a third party. The data was in a document attached to a misaddressed email that had been sent by an employee of a public body. 👉 https://www.dataprotection.ie/en/dpc-guidance/dpc-case-studies#2020024

👨‍👩‍👧 These guides are for parents who want to learn about their children’s data protection rights under the GDPR and to answer questions that can arise in typical situations where those rights apply. 🔗 https://dataprotection.ie/en/dpc-guidance/my-childs-data-protection-rights

🏫📸 Sharing back-to-school photos can sometimes lead to unintended oversharing of personal information about your child. Pause Before You Post and consider our guide: https://www.dataprotection.ie/en/dpc-guidance/blogs/back-school-photos-keeping-information-about-your-child-safe#pause%20before

📢 Press Release The DPC has today announced an inquiry into Children’s Health Ireland relating to the physical safety and security of children’s health records within one specific CHI facility in Tallaght. Our press release 👉 dataprotection.ie/en/news-medi...

A Data Protection Officer should have an appropriate level of expertise in data protection law and practices to enable them to carry out their critical role. Read our guidance on the appropriate qualifications for DPOs to learn more 👇 https://dataprotection.ie/en/dpos/qualifications-dpos

Case Study 🔍 This complaint concerned the alleged loss by the complainant’s bank of correspondence relating to the complainant’s bank account, which had been hand-delivered to the bank by the complainant’s partner. 👉 https://www.dataprotection.ie/en/dpc-guidance/dpc-case-studies#202009

With a public consultation, the BfDI aims to contribute to ensuring that practical knowledge about AI is available to everyone for regulatory assessment. More information 🔗 https://www.dataprotection.ie/en/news-media/latest-news/german-federal-dpa-ongoing-public-consultation-ai-and-memorisation

📽️ Some highlights from the launch of our Adult #Safeguarding Toolkit last Thursday. 🛠️ The toolkit will provide organisations and individuals with guidance and resources to help protect the personal data of vulnerable adults. 🔗 dataprotection.ie/en/dpc-guida...

Firewalls - A key weapon in combating unauthorised access attempts and absolutely essential where there is any external connectivity to other networks or to the internet. Learn about Data Security: https://www.dataprotection.ie/en/organisations/know-your-obligations/data-security-guidance

New Data Protection Adult Safeguarding Toolkit: 🎯 Guidance 🔍 FAQs 📚 Resources 🔗 www.dataprotection.ie/en/dpc-guida... Take a look at what's inside 👀

📢 Latest News! Data Protection Commission launches Adult Safeguarding Toolkit to protect vulnerable adults' data. 👇 Read our press release https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-launches-adult-safeguarding-toolkit-protect-vulnerable-adults-data

Case Study 📚 This complaint concerned an alleged incomplete response to a data subject access request, made to the trustees of a pension scheme. 👉 https://www.dataprotection.ie/en/dpc-guidance/dpc-case-studies#2020014

📌 Any processing of personal data should be lawful, fair and transparent. It should be clear when personal data is collected and processed, and to what degree. The Seven 🔑 Principles of Data Protection: https://dataprotection.ie/en/organisations/data-protection-basics/principles-data-protection

The GDPR does not prevent you contacting organisations on behalf of someone else and shouldn't be used as a barrier to prevent accessibility. Our blog post 👇 https://dataprotection.ie/en/dpc-guidance/blogs/can-i-talk-account-holder-contacting-organisations-behalf-someone-else

Under the GDPR, certain organisations are required to appoint a designated Data Protection Officer and to provide these details to the DPC. For more information on DPOs, visit our website: https://www.dataprotection.ie/en/organisations/know-your-obligations/data-protection-officers