Who We Are

Data Protection Commission Publishes Annual Report for 2025 and Results of “Sharenting” Survey

30th June 2026

The Data Protection Commission (DPC) published its Annual Report for 2025 today. At a press conference at the DPC’s offices, Commissioners for Data Protection, Dr Des Hogan (Chairperson), Mr Dale Sunderland and Ms Niamh Sweeney detailed the significant work of the office throughout the year. 

Some highlights from the 2025 Annual Report

  • The DPC received 16,160 new cases from individuals in 2025, representing a 45% increase on 2024. 11,734 cases were concluded during the year, a 12% increase on 2024.
  • The DPC concluded 208 valid cross-border complaints (as EU/EEA Lead Supervisory Authority). This represented a 43% increase on 2024. 
  • Total valid breach notifications received in 2025 was 6,521, representing a 16% decrease on 2024. 85% of these notifications were concluded by year end. Almost half of these breaches were a result of correspondence being sent to the wrong recipient. 
  • The DPC provided input and observations on over 77 pieces of proposed legislation in 2025. The DPC has seen steady growth in this particular area of work. In 2024, the figure was 56 and in 2023 it was 37. 
  • A total of 275 electronic direct marketing investigations were concluded in 2025, an 88% increase on cases concluded in 2024. The DPC also issued 50 warning letters to companies on foot of unsolicited marketing communications. 
  • The DPC finalised 4 large scale inquiries in 2025 and imposed administrative fines totalling just over €530.77m and multiple reprimands and compliance orders, including the following inquiries:
    • In April 2025, the DPC adopted a final decision in an own-volition statutory inquiry, concerning TikTok Technology Limited’s (‘TikTok’) transfers of EEA User Data to China. The DPC decision ordered TikTok to suspend the data transfers and to bring the processing into compliance. The DPC also imposed two administrative fines totaling €530 million.
    • In June 2025, the DPC announced its final decision following an inquiry into the Department of Social Protection’s (DSP)processing of biometric facial templates and the use of associated facial matching technologies as part of the Public Services Card registration process, referred to as “SAFE 2 registration”. In the decision, the DPC ordered a formal reprimand to the DSP and imposed fines totaling €550,000. The DPC ordered the DSP to cease biometric data processing related to SAFE 2 registration within nine months unless a valid lawful basis can be established. 

 

Dr Des Hogan, Chairperson, Commissioner for Data Protection commented: 

“2025 saw an unprecedented 45% increase in cases received by the Data Protection Commission (DPC), many of which involved the use of Artificial Intelligence (AI) by persons making complaints, adding to the volume and complexity of the documentation presented. At the same time, the scale and complexity of the use of personal data by rapidly advancing AI technologies increased significantly, with heightened risks and harms for individuals. Despite challenges such as these, we saw a significant increase in cases concluded throughout the year.” 

 

Sharenting Survey 2025

To coincide with the publication of the 2025 Annual Report, the Data Protection Commission has also released the results of an independent survey on the practice of “Sharenting”, which is a combination of the words ‘parenting’ and ‘sharing’ and is used to describe the practice of parents regularly sharing information, photos and videos about their children on social media and other online platforms. The survey, which was undertaken as part of the DPC’s 'Pause Before You Post' Ad campaign, and in collaboration with our colleagues in the French Data Protection Authority, was conducted to gauge public attitudes and knowledge around the practice of sharenting, and involved the surveying of more than 1,000 parents in both Ireland and France.

The independent Sharenting Survey Report is now available to view.

Key Findings 

  • 3 out 4 of parents have shared content relating to their children online in the past year
  • 1 in 3 parents share daily or several times a week about their children 
  • Of those who share content of their children online, 14% of parents in Ireland consider themselves to be ‘parent influencers’, with 10% in France
  • 40% of parents never or rarely seek their children’s consent before sharing content 
  • In Ireland, 66% of parents identified the risk of their children’s image being misused by strangers and 55% are concerned about the use of Artificial Intelligence (AI) and deepfakes in relation to this imagery 
  • Between half to two thirds of parents in both countries state that sharing moments with their friends and family is the primary motivation for sharenting. Between 3-4% state their motivation derives from generating additional income
  • 9 out of 10 parents share content about their children to a restricted audience