A Record-Breaking Year: the Data Protection Commission’s Annual Report 2025
DPC's 2025 annual report shows a 45% complaints rise, AI-driven complaints, fewer breaches, growing inter-regulatory role, and reprimands.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
DPC's 2025 annual report shows a 45% complaints rise, AI-driven complaints, fewer breaches, growing inter-regulatory role, and reprimands.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Here is a selection of our recent publications from July 2025.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
On 19 June 2025, the Data Protection Commission published its Annual Report for 2024, accompanied by the results of its first Public Attitudes Surv...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
High Court upholds DPC's decision that HSE was not a data controller for non-work-related personal data on an employee's work phone.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
A recent European court decision has shifted the goalposts on the standard of data anonymisation and impacting the meaning of personal data. This m...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Green light for EU-US transfers? Meta appeal against DPC Decision remains on hold but sheds light on timing for the "adequacy" of EU-US transfers.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Council of Europe's annual Data Protection Day 2022: we unpack the key data protection stories of 2021 and look ahead to what to expect in 2022.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Ahead of the Council of Europe's annual Data Protection Day on 28 January 2021, we unpack the key data protection stories of 2020 and look ahead to...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
To mark International Data Protection Day 2020, our Technology & Data Protection team round-up some of the key data protection stories of 2019 and ...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Reported data breaches in Europe rose by almost 20% in 2020. Ireland, as host to many large technology and social media companies, ranked as the t...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
European Court upholds validity of Standard Contractual Clauses but not Privacy Shield as international transfer regime, though with strings attach...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Irish High Court has delivered a ruling that the DPC can resume an investigation that may result in a prohibition on Facebook's EU-US data tran...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Websites and apps have 6 months to comply with the Data Protection Commission's recently published report and separate guidance on Cookies and Othe...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Irish Data Protection Commission (DPC) has announced a series of fines for Irish Child and Family Agency, TUSLA for breaches of the General Dat...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Data Protection Commission Publishes Annual Report for 2017 outlining the work carried out in 2017 and also its priorities for the future.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission (DPC) has published a special investigation report on data protection in the hospitals sector.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
We consider how businesses might navigate some of the demands of data protection compliance in the context of COVID-19 and share some practical tip...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission is investigating whether the refusal to respond to a request for rectification (arising out of the omission of a sín...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
EU Commissioner for Justice, Didier Reynders, has defended the Data Protection Commission in a letter to Dutch and German MEPs.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The 2021 Health Research Regulations introduce significant new revisions to the law on processing personal data for health research purposes.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
What constitutes a reasonable request for further information for verifying identity? Do you need to ask for additional information in all circumst...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has published another annual report on what has been a challenging a year, and certainly a year of firsts for the body.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
50% of employers say their main data protection concern for returning to work is dealing with a confirmed COVID-19 case in the workplace. Here we d...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has been ordered to pay the majority of the costs in the litigation concerning the Schrems II decision. This follows...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
In this article, William Fry specialists identify key data protection issues apparent during the recent global increase in video conferencing follo...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has found a security system used in Irish prisons, which involves the scanning of thumbprints, to be in breach of th...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission (DPC) and the European Commission (EC) have recently published reports reviewing the application and enforcement of ...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
We aim to keep you up to date on legal developments that may affect you or your business. Here are some of our recently published website articles ...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Tá fiosrú á dhéanamh ag an DPC faoin diultú atá déanta ag eagraíochtaí áirithe ainm as Gaeilge a litriú leis an síneadh fada.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has issued guidance to assist landlords in understanding what information they may request from prospective tenants.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Supreme Court dismisses Facebook's appeal on the transfer of personal data.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commission has ruled that there was no breach of data protection law in a complaint concerning employer use of third-party CCTV...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Data Protection Commission issues first annual report post GDPR demonstrating a surge in both complaints and reports of breaches.
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
Since the coming into force of the GDPR, organisations are dealing with an increase of queries concerning the processing of personal data, while th...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The Data Protection Commissioner has advised data controllers to act quickly to mitigate the effects of the recently publicised IT vulnerabilities ...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
This week's Budget 2019 announcement included an increase in funding of 3.5 Million for the Data Protection Commission (DPC). This allocation bring...
Array
(
[0] => WP_Term Object
(
[term_id] => 49
[name] => Article and Insights
[slug] => articlesinsights
[term_group] => 0
[term_taxonomy_id] => 49
[taxonomy] => category
[description] =>
[parent] => 0
[count] => 5485
[filter] => raw
[cat_ID] => 49
[category_count] => 5485
[category_description] =>
[cat_name] => Article and Insights
[category_nicename] => articlesinsights
[category_parent] => 0
)
)
The DPC intends to conduct an audit on travel organisations to ensure they are aware of their obligations under current data protection legislation...