iiinova — where your digital self keeps evolving

Data Protection Commission Ireland @dpcireland.bsky.social · 17h

📢 New Decision We have announced our final decision following an inquiry into Children’s Health Ireland relating to the physical safety and security of children’s health records within one specific CHI facility at Tallaght University Hospital. Our press release 👉 dataprotection.ie/en/news-medi...

101

Data Protection Commission Ireland @dpcireland.bsky.social · 30/09/2026

🗣️ Deputy Commissioner Ian Chambers spoke at this week’s 12th Annual ASSO DPO Congress in Milan. Ian was joined by Luigi Montuori and Mirosław Wróblewski of the Italian and Polish DPAs, respectively, in a panel discussion moderated by Paul Jordan on the future of data protection.

010

Data Protection Commission Ireland @dpcireland.bsky.social · 28/09/2026

This guidance highlights some of the key issues that arise in the context of estate agents collecting personal data for the purpose of arranging viewings of a property. 🏡 www.dataprotection.ie/en/dpc-guida...

Guidance on the Collection of Personal Data Prior to Viewing a Property

031

Data Protection Commission Ireland @dpcireland.bsky.social · 24/09/2026

✍️ Our newly published report details the DPC’s supervision of Artificial Intelligence products and services between 2021 and 2025 and contains case studies that highlight the DPC’s recommendations 👇

001

Data Protection Commission Ireland @dpcireland.bsky.social · 24/09/2026

🆕 Today we have published a new document detailing the DPC’s supervision of Artificial Intelligence products and services between 2021 and 2025, which details a significant increase in AI-related engagements in recent years. Read on our website now: 🔗 dataprotection.ie/en/dpc-guida...

010

Data Protection Commission Ireland @dpcireland.bsky.social · 24/09/2026

🔔 Our website will be offline for scheduled maintenance between 1pm and 2pm today, Thursday, 24 September. Should you wish to submit a complaint or report a breach during this time, you will be able to use the information provided on our holding page during this maintenance.

020

Data Protection Commission Ireland @dpcireland.bsky.social · 21/09/2026

📢 New Decision Data Protection Commission fines Google €403 million following inquiry into Google’s processing of location data

124

Data Protection Commission Ireland @dpcireland.bsky.social · 16/09/2026

🤝 Commissioner Niamh Sweeney and Deputy Commissioner Cian O’Brien spent time with colleagues at the Spanish Agency for Data Protection, the AEPD, earlier this week. They discussed a broad range of issues including rising complaint numbers and opportunities to use AI to assist with our work.

010

Data Protection Commission Ireland @dpcireland.bsky.social · 13/09/2026

▶️ Speaking with Jess Kelly on Newstalk's "Inside the Data Protection Commission" series, Deputy Commissioner Cathal Ryan gives an update on the DPC's approach to the regulation of video-recording devices, in particular, smart glasses 🕶️

000

Data Protection Commission Ireland @dpcireland.bsky.social · 12/09/2026

Deputy Commissioner Cian O'Brien on the DPC's large-scale inquiries 👇 "We do need to be agile in how we pursue our large-scale inquiries and we're really guided by where our resources can do the most good and where we can protect individuals to the greatest extent possible."

000

Data Protection Commission Ireland @dpcireland.bsky.social · 11/09/2026

⚖️ Deputy Commissioner Deirdre O'Donovan, Director of Legal, speaking on the appeals that are sometimes brought by organisations following the DPC's final decisions. 📻 You can listen to Tech Talk's "Inside the Data Protection Commission" series on Newstalk now.

000

Data Protection Commission Ireland @dpcireland.bsky.social · 10/09/2026

🗨️ "In 2014 we had in the region of 30 staff; we now have 300 staff. The measure is not where we've come from, it's where do we need to be to be a proactive on-the-front-foot regulator." Commissioner Dale Sunderland on Newstalk's Inside the Data Protection Commission series.

010

Data Protection Commission Ireland @dpcireland.bsky.social · 08/09/2026

📢 Latest News We welcome the outcome of prosecution proceedings taken in Dublin Metropolitan District Court yesterday, 7 September 2026. Read our press release 🔗 www.dataprotection.ie/en/news-medi...

The Data Protection Commission (DPC) welcomes the outcome of prosecution proceedings taken in Dublin Metropolitan District Court yesterday 7 September 2026.

At Dublin Metropolitan District Court before Judge Halpin, Brown Thomas Arnotts Limited (Brown Thomas) pleaded guilty to five sample charges out of a total of twenty-one charges in relation to breaches of the regulations which apply to the sending of unsolicited marketing communications.

Today’s outcome should serve as a reminder to all organisations that are engaged in any form of electronic marketing, that non-compliance with the regulations may result in a criminal prosecution by the DPC.

010

Data Protection Commission Ireland @dpcireland.bsky.social · 08/09/2026

📅 1 Week to Go! Join us at the DPC exhibition stand in the Government of Ireland Village at the National Ploughing Championships 2026, taking place from 15-17 September. We hope to see you there!

National Ploughing Championships 2026
15-17 September

1 Week to Go!

000

Data Protection Commission Ireland @dpcireland.bsky.social · 07/09/2026

📻 Deputy Commissioner Ian Chambers discussing how the DPC manages complaints around domestic CCTV, specifically doorbell cameras, on Newstalk's Inside the Data Protection Commission series. Our guidance on Domestic CCTV 👉 www.dataprotection.ie/en/dpc-guidan…

000

Data Protection Commission Ireland @dpcireland.bsky.social · 06/09/2026

🗣️ Deputy Commissioner Jennifer Dolan speaking with Jess Kelly on her role in the DPC safeguarding children's data protection rights and our viral Pause Before You Post ad campaign this year. 📻 You can listen to Tech Talk's "Inside the Data Protection Commission" series on Newstalk now.

030

Data Protection Commission Ireland @dpcireland.bsky.social · 04/09/2026

🏦 Banking & Insurance Sector FAQ: My personal information has been passed to a debt collection agency. Is this a data protection issue? Our FAQs 👉 www.dataprotection.ie/en/faqs/bank...

Banking and Insurance FAQs
My personal information has been passed to a debt collection agency.
Is this a data protection issue?

000

Data Protection Commission Ireland @dpcireland.bsky.social · 02/09/2026

The DPC and the Mental Health Commission have jointly launched a new guidance aimed at ensuring that video monitoring technologies are used appropriately in care settings, while protecting the privacy, dignity and rights of people receiving care and treatment.

110

Data Protection Commission Ireland @dpcireland.bsky.social · 02/09/2026

📢 Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE) Full Press Release 👉 www.dataprotection.ie/en/news-medi...

New Decision
We have announced our final decision following an inquiry into the HSE's processing of personal data contained in paper records.

This inquiry commenced as a result of two personal data breaches notified to the DPC in October 2023 and November 2023.

Our final decision contains fines totalling €645,000, a reprimand, and a number of corrective orders imposed on the HSE.

021

Data Protection Commission Ireland @dpcireland.bsky.social · 27/08/2026

This guidance aims to help organisations that have fewer than 10 employees with their responsibilities under the GDPR with regard to how they collect, use, and protect personal data. If you are part of a microenterprise, take a look 👇 www.dataprotection.ie/en/dpc-guida...

Data Security Guidance for Microenterprises

010

Data Protection Commission Ireland @dpcireland.bsky.social · 26/08/2026

🔍 Case Study: Right to erasure and user generated content The complainant in this case stated they were identified in a negative review posted online about their place of employment. The complainant sought to remove their name and any associated images from the review. Read 👇

Background
This complaint concerned an initial refusal by the data controller to comply with an erasure request made by the complainant, pursuant to Article 17 GDPR. The complainant first lodged their complaint via the Spanish Data Protection Authority, the AEPD, who then transferred the complaint to the DPC as the Lead Supervisory Authority.

The complainant stated that they were named, and therefore identified, in a negative review relating to their place of employment . The review, accompanied by a partial image of the complainant, had been posted online . The complainant had sought the removal of their name and any associated images from the review.

Engagement
During its engagement with the DPC on the matter, the data controller advised that they had reviewed the content in question in the context of their own privacy guidelines for the removal of content from the website and that they considered the content did not infringe upon same.

The DPC requested that the data controller review the matter again, in the spirit of amicably resolving the complaint . The data controller subsequently reverted to advise that after a further assessment of the content in question they had made the decision to remove the review posting in its entirety.

Takeaways
This case study demonstrates the benefits, to individual complainants, of the DPC’s intervention by way of the amicable resolution process . In this case, this led to the complainant being able to affect their right of erasure over their personal data, as afforded to individuals under Article 17 of the GDPR.

011

Data Protection Commission Ireland @dpcireland.bsky.social · 25/08/2026

🚜 The DPC is delighted to be attending the National Ploughing Championships again this year! 📅 In just 3 weeks you can join us at our exhibition stand in the Government of Ireland Village from 15-17 September.

3 weeks to go to the National Ploughing Championships

010

Data Protection Commission Ireland @dpcireland.bsky.social · 21/08/2026

⏸️ If you are thinking about posting a picture online of your child on their first day back-to-school, Pause Before You Post and consider the four simple tips in our blog post. 🔗 www.dataprotection.ie/en/dpc-guida...

Blog: Back-to-School Photos
Pause before you post to protect your child's information

022

Data Protection Commission Ireland @dpcireland.bsky.social · 19/08/2026

🔍 Case Study This complaint concerned the processing of health data relating to a member of an income protection insurance scheme, by a third party, whose involvement in the claim was not known to the complainant. Read 👉 www.dataprotection.ie/en/dpc-guida...

Case Study
Processing of health data for an income protection insurance scheme

021

Data Protection Commission Ireland @dpcireland.bsky.social · 17/08/2026

📸 In general, the GDPR does not prohibit people from taking photos or video in a public space, provided you are not harassing anyone. However, what what you do with that photo can potentially become a data protection issue e.g. if it was shared publicly on social media or used for commercial gain.

022

Data Protection Commission Ireland @dpcireland.bsky.social · 14/08/2026

🗃 Case Study This complaint concerned an alleged incomplete response to a subject access request for CCTV footage. It was made by the complainant to an educational institution, regarding an alleged attempted assault. 👉 www.dataprotection.ie/en/dpc-guida...

012

Data Protection Commission Ireland @dpcireland.bsky.social · 13/08/2026

🔒 The GDPR provides extra protection for certain categories of personal data, called “special category data”. ❌ These categories of personal data shall not be processed unless a controller can avail of one of the exceptions under Article 9(2) of the GDPR.

What is special category data?
The General Data Protection Regulation (GDPR) provides extra protection for certain categories of personal data, called “special category data”, under Article 9 of the GDPR. Special category data refers to data which reveals:

“Racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purposes of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”.

122

Data Protection Commission Ireland @dpcireland.bsky.social · 11/08/2026

🗒️ This guide and checklist is to assist the Small and Medium Enterprise (SME) sector, who may not have access to extensive planning and legal resources, to prepare for a business future that is data-protection compliant. Take a look 👉 www.dataprotection.ie/en/dpc-guida...

010

Data Protection Commission Ireland @dpcireland.bsky.social · 07/08/2026

🏦 Banking & Insurance Sector FAQs Financial institutions are legally obliged under Anti-Money Laundering legislation to carry out Politically Exposed Persons screenings where there is a 'reasonable risk' of money laundering and terrorist financing. Read 👇 www.dataprotection.ie/en/faqs/bank...

Banking and Insurance FAQs - What is Politically Exposed Person's screening?

021

Data Protection Commission Ireland @dpcireland.bsky.social · 05/08/2026

Case Study 🔎 A data subject contacted the DPC as they were not satisfied with the responses to an access and erasure request. This case was against a debt collector and the data subject raised concerns about how their personal data was obtained. 👉 www.dataprotection.ie/en/dpc-guida...

020

Data Protection Commission Ireland @dpcireland.bsky.social · 30/07/2026

⚖️ This table gives a general outline of which rights could be applicable when personal data are processed under the different legal bases under the GDPR. 💡 Learn more: Guidance on Legal Bases 🔗 www.dataprotection.ie/en/dpc-guida... Your Rights under the GDPR 🔗 www.dataprotection.ie/en/individua...

Guidance on Legal Bases

Some of rights granted to data subjects under the GDPR only apply where processing is justified by particular legal bases.

This table gives a general outline of which rights could be applicable when personal data are processed under the different legal bases.

013

Data Protection Commission Ireland @dpcireland.bsky.social · 27/07/2026

The final episode of Tech Talk with Jess Kelly's "Inside the Data Protection Commission" series is available now! In this episode, Deputy Commissioner Cathal Ryan talks through the Consultation and Supervision functions of the DPC. Listen now on Newstalk 👇 www.newstalk.com/podcasts/tec...

newstalk.com

Inside The Data Protection Commission: Consultation and concerns | Newstalk

Cathal Ryan Deputy Commissioner, with responsibility for Consultation and Supervision joins Jess ...

011

Data Protection Commission Ireland @dpcireland.bsky.social · 21/07/2026

🧩 Every action you take can form part of an overall jigsaw of your online activity and tells a story about you. Be aware of how to manage your digital footprint by reading our blog post ✍️ www.dataprotection.ie/en/dpc-guidan…

042

Data Protection Commission Ireland @dpcireland.bsky.social · 13/07/2026

Case Study 🔎 A public figure published a copy of an email on their social media with a journalist's name and contact details legible. 👉 www.dataprotection.ie/en/dpc-guidan…

010

Data Protection Commission Ireland @dpcireland.bsky.social · 10/07/2026

Part two of Tech Talk with Jess Kelly's "Inside the Data Protection Commission" series is available on Newstalk now. In this episode, Jess speaks with a number of our colleagues on the topic of 'Big Tech'. Have a listen here 🔗 www.newstalk.com/podcasts/tec...

newstalk.com

Inside the Data Protection Commission: Tackling Big Tech | Newstalk

This is part 2 of a special series of reports from inside the Irish Data Protection Commission. I...

011

Data Protection Commission Ireland @dpcireland.bsky.social · 09/07/2026

Data protection notices, or 'Privacy Policies', explained. How do I make a Privacy Policy? 🔗 www.dataprotection.ie/en/faqs/resp...

030

Data Protection Commission Ireland @dpcireland.bsky.social · 08/07/2026

🔔 Reminder! We currently have several vacancies for Legal Analysts. 📆 The closing date for receipt of completed applications is 3pm on Thursday, 16th July 2026. See our careers page for more info 🔗 www.dataprotection.ie/en/who-we-ar...

011

Data Protection Commission Ireland @dpcireland.bsky.social · 07/07/2026

Last week, the DPC launched its Annual Report for 2025 at a press conference in our Dublin offices. Commissioners for Data Protection, Dr Des Hogan, Mr Dale Sunderland and Ms Niamh Sweeney detailed the significant work of the office throughout the year. ▶️ Take a look back on the day!

010

Data Protection Commission Ireland @dpcireland.bsky.social · 06/07/2026

🫶 As part of Disability Pride Month, we were delighted to welcome CJay Smith, Assistive Technology & Communications Specialist at Neurodiversity Ireland, to speak at a staff event on supporting neurodiversity in the workplace. Thanks again to CJay for the engaging and informative session!

010

Data Protection Commission Ireland @dpcireland.bsky.social · 02/07/2026

Our final decision following an inquiry into a series of personal data breaches at Permanent TSB is now available to download in full on our website. 👉 dataprotection.ie/en/dpc-guida...

021

Data Protection Commission Ireland @dpcireland.bsky.social · 01/07/2026

🙌 Join our team! The DPC currently has several vacancies for Legal Analysts. The role offers a unique and exciting opportunity to embrace new challenges, do purposeful work and make a real difference to the Irish State. Learn more here 👇 dataprotection.ie/en/careers/l...

011

Data Protection Commission Ireland @dpcireland.bsky.social · 01/07/2026

The DPC launched its Annual Report for 2025 at a press conference in our Dublin offices yesterday. Commissioners for Data Protection, Dr Des Hogan, Mr Dale Sunderland and Ms Niamh Sweeney detailed the significant work of the office throughout the year.

111

Data Protection Commission Ireland @dpcireland.bsky.social · 30/06/2026

▶️🗣️ Deputy Commissioner Graham Doyle on today's publication of the DPC Annual Report for 2025. 🔵 The DPC received 16,160 new cases in 2025 🟠 Total valid breach notifications received was 6,521 🟡 The DPC finalised 4 large-scale inquiries and imposed fines totalling just over €530m

032

Data Protection Commission Ireland @dpcireland.bsky.social · 30/06/2026

🔔 To coincide with the publication of our 2025 Annual Report, the Data Protection Commission has also released the results of an independent survey on the practice of “Sharenting”. Read more 👉 dataprotection.ie/en/data-prot...

020

Data Protection Commission Ireland @dpcireland.bsky.social · 30/06/2026

📢 Data Protection Commission publishes its Annual Report for 2025. Read the press release and full report on our website 👉 dataprotection.ie/en/data-prot...

Cases, Complaints and Breach Notifications

020

Data Protection Commission Ireland @dpcireland.bsky.social · 26/06/2026

🎉 Tomorrow is #MSMEDay2026 raising awareness of the tremendous contributions of micro, small and medium-sized enterprises! The DPC has a variety of resources available supporting MSMEs, including infographics, guidance, blogs and podcasts. Visit: www.dataprotection.ie/en/dpc-guidan…

100

Data Protection Commission Ireland @dpcireland.bsky.social · 25/06/2026

🤝 Commissioner Des Hogan was delighted to meet with Waldemar Gonçalves Ortunho Junior, Director-President of the Brazilian National Data Protection Authority, on the sidelines of the IAPP Leadership Summit in New Hampshire earlier today.

000

Data Protection Commission Ireland @dpcireland.bsky.social · 23/06/2026

🔔 Reminder! Applications for our vacancy for the role of Senior Litigation Lawyer (Assistant Principal Higher) close at noon tomorrow. Visit our Careers page for information on how to apply now 🔗 www.dataprotection.ie/en/who-we-ar...

013

Data Protection Commission Ireland @dpcireland.bsky.social · 19/06/2026

In this blog post, we aim to clarify what information is appropriate for schools to request during the pre-enrolment stage, and to support schools in taking a proportionate and compliant approach to personal data processing from the outset. Read 📖 www.dataprotection.ie/en/dpc-guida...

Processing Personal Data during Pre-Enrolment: What Schools Need to Know

000

Data Protection Commission Ireland @dpcireland.bsky.social · 18/06/2026

🔔 Our website will be offline for scheduled maintenance between 11am and 11.30am today, 18 June. Any organisations who need to report a breach of personal data during this time will be able to use the email address provided on our website holding page during this maintenance.

010