Who We Are

Irish DPC submits Article 60 draft decision on inquiry into Instagram

07th December 2021

The Data Protection Commission (DPC) submitted a draft decision in an inquiry into Instagram to other Concerned Supervisory Authorities across the EU on Friday last, December 3rd. This inquiry was commenced in September 2020 and it examined certain processing of the personal data of children by Facebook Ireland Limited in the context of the “Instagram” social networking service. ...

Statement from DPC regarding allegations made in media publications on 05 and 06 and 07 December

07th December 2021

There has been considerable media coverage in recent days, alleging that the Data Protection Commission (DPC), acting in bad faith on foot of meetings it held with Facebook as part of its regulatory role, “lobbied” the European Data Protection Board (EDPB) with a view to achieving the adoption of guidelines by the EDPB on Article 6(1)(b) GDPR (‘necessity for the performance of a contract’), in ...

"Children Front and Centre: Fundamentals for a Child-Oriented Approach to Data Processing”: Report on Public Consultation

19th November 2021

In December 2020, the Data Protection Commission (“DPC”) published draft guidance entitled “Children Front and Centre: Fundamentals for a Child-Oriented Approach to Data Processing” (the “Fundamentals”). ...

Overview of the upcoming new breach notification web-forms

15th September 2021

The DPC has carried out a review of the breach web-forms currently being used by data controllers to notify personal data breaches in accordance with Article 33 of the GDPR and Section 86 of the Data Protection Act 2018. On foot of this review, data controllers will be required in the coming weeks to use a revised web-form. The purpose of the revised breach web-form is:    ...

DPC launches two inquiries into TikTok concerning compliance with GDPR requirements relating to the processing of childrens’ personal data and transfers of data to China

14th September 2021

The Data Protection Commission (DPC) has today commenced two own-volition inquiries pursuant to section 110 of the Data Protection Act 2018 in relation to TikTok Technology Limited’s (TikTok) compliance with requirements of the GDPR. ...