Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 06 NOVEMBER 2017

Broad Inadequacy Of Online Privacy Notices Identified

RDJ LLP
RDJ LLP
Contributor
RDJ LLP

RDJ LLP

RDJ is one of Ireland’s leading corporate law firms. With more than 300 employees and offices in...

View firm profile
Explore more from RDJ LLP

On Wednesday, the Global Privacy Enforcement Network ("GPEN") published its findings from its 2017 "Sweep".

IrelandPrivacy
Elena Vassileva
Elena Vassileva
Sarah Slevin
Sarah Slevin
Author LinkedIn connections

On Wednesday, the Global Privacy Enforcement Network ("GPEN") published its findings from its 2017 "Sweep". The GPEN is an informal international network of data protection agencies from around the globe, including the Irish Data Protection Commissioner (the "DPC"), which aims to facilitate and encourage co-operation between national data protection agencies on a global level.

As part of this investigation, 24 separate data protection agencies examined a total of 455 websites and applications across a broad spectrum of sectors. The purpose of this investigation was to examine "privacy communications and practices in relation to user controls over personal information" (essentially, online privacy notices and other types of communications with users on matters of data protection and privacy) to determine how clear it was, from a user's perspective, what data was being collected, the purpose of the collection of the data and how this data was being processed, used and

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.
IrelandPrivacy
Matheson
Matheson
Article

DPC AI Insights Report: Key Takeaways

Ireland's Data Protection Commission has published a comprehensive report examining its supervisory engagement with organizations developing AI products between 2021 and 2025, revealing a tenfold increase in AI-related engagements and highlighting critical compliance areas including lawful basis, transparency, and children's data protection. The report provides detailed insights into the DPC's quasi-regulatory sandbox approach and outlines key observations on data protection obligations for AI technologies,
IrelandPrivacy
Matheson
Matheson
Article

EU Introduces Mandatory Withdrawal Button For Online Consumer Contracts

The EU's new withdrawal button requirement will fundamentally reshape how online traders interact with consumers across member states. From June 2026, businesses offering digital contracts must implement a two-step withdrawal function that allows consumers to exercise their 14-day cooling-off period with unprecedented ease. What technical, operational, and legal changes must traders implement to meet these obligations, and what are the consequences of non-compliance?
IrelandConsumer Protection
RDJ LLP
RDJ LLP
Article

Rental Law Update: Recent Enactments Under The Housing And Residential Tenancies (Miscellaneous Provisions) Act 2026

Ireland's residential tenancies regime has undergone further significant reform through the Housing and Residential Tenancies (Miscellaneous Provisions) Act 2026, introducing new enforcement mechanisms and procedural changes that landlords must navigate. The RTB now wields expanded powers including fixed payment notices for compliance breaches, while adjudication hearings have shifted to public forums with published outcomes.
IrelandReal Estate and Construction
RDJ LLP
RDJ LLP
Article

Greenwashing Enforcement Has Arrived: What The EU's New Fast Fashion Rules Signal For All Consumer-Facing Businesses

The EU's Ecodesign for Sustainable Products Regulation has banned the destruction of unsold apparel and footwear from July 2026, forcing retailers to pivot from recycling and disposal to donation, resale and reuse strategies. With mandatory public reporting on unsold stock disposal and stricter policing of environmental marketing claims now in force, consumer-facing businesses across Ireland and the EU face a fundamental shift in how they manage inventory, report waste, and communicate sustainability creden
IrelandEnvironment
RDJ LLP
RDJ LLP
Article

Neurodivergence And Reasonable Accommodation: What Employers Need To Know

Employers face growing challenges in supporting neurodivergent employees, with up to 20% of the global population potentially affected by conditions like ASD, ADHD, and dyslexia. Irish law mandates reasonable accommodations under the Employment Equality Acts, but what constitutes appropriate measures and when does the burden become disproportionate? Recent case law reveals the narrow interpretation of employer defenses and the significant financial consequences of failing to properly assess and implement wo
IrelandEmployment and HR
RDJ LLP
RDJ LLP