Observing 2021–22 data breach decisions of the Irish Data Protection Commission

Marie C. Daly
Additional contact information
Marie C. Daly: Special Counsel, Covington & Burling, Ireland

Journal of Data Protection & Privacy, 2023, vol. 5, issue 3, 254-266

Abstract: The Irish Data Protection Commission (DPC) regulates many of the top global technology companies and as such its decisions have a significant impact on the companies and on the many users of their platforms. This article examines a number of recent data breach decisions of the DPC and finds them forensic, focused, reasoned and formulaic in approach. The decisions deal with key General Data Protection Regulation (GDPR) provisions, notably on requirements for data breach notification and communication with data subjects. In a change of strategy earlier this year, the DPC no longer offers guidance to controllers dealing with a breach, as was its previous practice. Decisions such as these are likely to help fill that vacuum.

Keywords: data breach; breach notification; DPC; data subjects (search for similar items in EconPapers)
JEL-codes: K2 (search for similar items in EconPapers)
Date: 2023
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/7443/download/ (application/pdf)
https://hstalks.com/article/7443/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jdpp00:y:2023:v:5:i:3:p:254-266

Access Statistics for this article

More articles in Journal of Data Protection & Privacy from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().