Disclaimer

The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission
Limiting Data Subject Rights and the Application of Article 23 of the General Data Protection Regulation
 
Introduction
 
The General Data Protection Regulation (EU) 2016/679 (the GDPR) comes into effect on the 25th May 2018.  The GDPR raises the bar for data controllers and data processors. It reinforces their obligations over the personal data they process through increased transparency, security and accountability requirements. At the same time the GDPR standardizes and strengthens the right of all data subjects by providing a framework as to how those rights are to be exercised. Notwithstanding, the GDPR also prescribes a mechanism (as per Article 23) to permit the restrictions of those rights in particular and specific circumstances. The purpose of these guidelines is to assist organisations to implement and apply lawful restrictions of those rights and obligations provided for in Articles 12 – 22 and Article 34  of the GDPR.