Data Protection Commission Ireland

@dpcireland.bsky.social

205 Followers 26 Following

Ireland's independent supervisory authority for data protection. Social Media Policy: https://bit.ly/3CVqpGp Queries/Complaints: https://forms.dataprotection.ie

What is special category data? The General Data Protection Regulation (GDPR) provides extra protection for certain categories of personal data, called “special category data”, under Article 9 of the GDPR. Special category data refers to data which reveals: “Racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purposes of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”.
Self-Assessment Checklist
Banking and Insurance FAQs - What is Politically Exposed Person's screening?
Case Study - debt collector involvement
Guidance on Legal Bases Some of rights granted to data subjects under the GDPR only apply where processing is justified by particular legal bases. This table gives a general outline of which rights could be applicable when personal data are processed under the different legal bases.
Privacy Policies Explained
Join Our Team
Annual Report 2025
Processing Personal Data during Pre-Enrolment: What Schools Need to Know
“The HSE estimated that the personal data of approximately 84,000 persons was affected by this breach. While there was no clear evidence that the attackers had exfiltrated clinical data, a forensic report on the breach was not able to exclude the possibility of such action. The sensitive nature of the personal data and the large number of persons potentially affected therefore posed risks to the clinical care of patients and of disclosure and misuse of their personal data. The DPC acknowledges the considerable improvements made by HSE in the intervening period of time since the breach, and its commitment to ongoing improvements.”
We have announced our final decision following an inquiry into a ransomware attack on the laboratory information system in Midlands Regional Hospital Tullamore, County Offaly. The attackers gained access to computers that stored and processed laboratory results of patients’ diagnostic tests, and used that access to encrypt patients’ personal data. The DPC has reprimanded the HSE, imposed an administrative fine of 300,000 EURO, and ordered the HSE to implement specified policies and procedures to ensure appropriate security of processing of personal data.
Guidance on Cookies and Other Tracking Technologies
Join Our Team
7 Key Principles of Data Protection
When your personal data has been affected by a breach
“When an individual’s personal data is transferred to a country outside the EU, the GDPR requires that this personal data is afforded essentially the same protections as it would within the EU. Recent action by the DPC, together with complaints to other European supervisory authorities, has brought data transfers to China, in particular, into focus. The inquiry is an important strategic priority for the DPC and we intend to cooperate closely with our peer European Supervisory Authorities as part of the investigation.”