Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 14 JUNE 2024

DPC 2023 Annual Report: More Complaints, Queries And Record Fines

Byrne Wallace Shields LLP
Byrne Wallace Shields LLP
Contributor
Byrne Wallace Shields LLP

Byrne Wallace Shields LLP

As one of Ireland’s leading full service law firms, Byrne Wallace Shields LLP is dedicated to the...

View firm profile
Explore more from Byrne Wallace Shields LLP

The Data Protection Commission ("DPC") published its 2023 Annual Report on 29 May 2024. The report provides insight into the evolving landscape of data protection and privacy, including the DPC's...

IrelandPrivacy
Sean O'Donnell
Sean O'Donnell

The Data Protection Commission ("DPC") published its 2023 Annual Report on 29 May 2024. The report provides insight into the evolving landscape of data protection and privacy, including the DPC's activities, highlighting significant trends, key enforcement actions and emerging challenges.

Key Enforcement Takeaways:

  • By the end of 2023, the DPC imposed fines totalling €1.55 billion.
  • The DPC had 89 statutory inquiries on-hand during the year, including 51 cross-border inquiries.
  • The DPC received 11,200 new cases from individuals in 2023, representing a 20% increase on 2022. The DPC concluded 11,147 cases in 2023.
  • In 2023, the DPC received 6,991 valid GDPR data breaches. This represented a 20% increase (1,077) on the GDPR breach numbers reported in 2022.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.
IrelandPrivacy
Matheson
Matheson