ICYMI 👇
Last week, the Data Protection Commission launched its Annual Report for 2023. You can read the 2023 Annual Report highlights and a full copy of the report on our website: dataprotection.ie/en/news-media/…

Our website will be offline for scheduled maintenance between 10.30am and 12.00pm today, Tuesday 4 June. Our web forms will still be fully available throughout the maintenance window, should you wish to submit a complaint or report a breach.

📬 Postal, 🛜 Online and 🏡 Door-to-Door canvassing - what are the obligations for campaigners under data protection law?

Read our guidance for canvassing and election campaigners
👉 dataprotection.ie/en/dpc-guidanc…

Some more highlights from our Annual Report:
▪️ Total valid breach notifications received in 2023 was 6,991.
▪️ This represented a 20% increase on 2022.
▪️ 92% of breach notifications received in 2023 were concluded by year-end.

Read more 👉 dataprotection.ie/en/news-media/…

Some highlights from our 2023 Annual Report:
▪️ In 2023, the DPC processed 2,600 new complaints.
▪️ The DPC resolved 3,218 complaints (includes complaints received prior to 2023)
▪️ There was a 20% increase in new cases from 2022.

Read more 👉 dataprotection.ie/en/news-media/…

The Data Protection Commission has today launched its Annual Report for 2023. You can read our press release and the full DPC Annual Report 2023 on our website 👉 dataprotection.ie/en/news-media/…

🚫 'The DPC does not consider there can be any justification for the extensive collection of personal data from prospective purchasers at the initial stages of advertising/viewings of a property.'

Collection of Personal Data Prior to Viewing a Property: dataprotection.ie/en/dpc-guidanc…

📢Data Protection Commission welcomes outcomes in prosecutions of marketing offences 👉dataprotection.ie/en/news-media/…

Under the GDPR, certain organisations are required to appoint a designated Data Protection Officer (DPO). A data controller can also voluntarily decide to appoint a DPO.

Read our Glossary of Key Terms to better understand your rights under the GDPR: dataprotection.ie/en/individuals…

Today marks the 6th anniversary of the GDPR! 🎂
Last year, we produced a podcast highlighting the DPC's work in the area of children's data protection rights over the first 5 years of the GDPR's implementation.
Listen here 👇
dataprotection.ie/en/resources/p…

🗳️ Candidates, political parties, and those involved in processing personal data as part of campaigning work need to ensure that they comply with their obligations under data protection law.

Read our guidance for canvassing and election campaigners here
👉dataprotection.ie/en/dpc-guidanc…

What is my Right to Erasure under the GDPR❓

There are seven grounds under which you have the right to have your data erased by a data controller, without undue delay. This is also known as the Right to be Forgotten.

Know your rights, read here 👉 dataprotection.ie/en/individuals…

A huge number of the queries we receive concern the GDPR's Right of Access. This guidance is to help both individuals who are seeking copies of their personal data, as well as controllers who are struggling to deal with the access requests they receive.
📖 dataprotection.ie/en/dpc-guidanc…

Are you aware of what Profiling is?

Any kind of automated processing of personal data that involves analysing or predicting your behaviour, habits or interests, could be considered Profiling.

Read our glossary of GDPR Key Terms to learn more: dataprotection.ie/en/individuals…

When should a DPIA be conducted?

A DPIA is mandatory where data processing is likely to result in a high risk to the rights and freedoms of natural persons and is in general good practice and a useful tool for organisations.

Read our guide to DPIAs here: dataprotection.ie/en/organisatio…

What are the benefits of conducting a DPIA?

A DPIA will improve awareness in the organisation of the data protection risks associated with a project, improving the design and enhancing communication with the public.

Read our guide to DPIAs here: dataprotection.ie/en/organisatio…

Wondering whether you can be charged for an access request❓

Access requests should generally be 🆓 of charge. However, where requests are considered ‘manifestly unfounded or excessive’, the data controller may charge a reasonable fee.

Learn more here 👉 dataprotection.ie/en/individuals…

When a data breach has occurred that is likely to result in a risk to data subjects, it is of the utmost importance that organisations understand and comply with their obligations regarding notifying the DPC and communicating to data subjects.

Learn more: dataprotection.ie/en/organisatio…

What is the Right to Rectification❓

If your personal data is inaccurate, you have the right to have the data rectified by the controller. If your personal data is incomplete, you have the right to have data completed.

Know your rights, read here 👉 dataprotection.ie/en/individuals…

Under the GDPR, certain organisations are required to appoint a designated Data Protection Officer (DPO). A data controller can also voluntarily decide to appoint a DPO.

Read our Glossary of Key Terms to better understand your rights under the GDPR: dataprotection.ie/en/individuals…