Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 24 FEBRUARY 2020

Highlights Of The Data Protection Commission's Annual Report For 2019

Mason Hayes & Curran LLP
Mason Hayes & Curran LLP
Contributor
Mason Hayes & Curran LLP

Mason Hayes & Curran LLP

Managing Partner: Will Carmody Chair: Philip Nolan Number of partners: 124 Languages: French,...

View firm profile
Explore more from Mason Hayes & Curran LLP

On 20 February 2020, Ireland's data protection supervisory authority, the Data Protection Commission (DPC), published its annual report for 2019 (Report).

IrelandPrivacy
Brian Johnston
Brian Johnston
Author LinkedIn connections

On 20 February 2020, Ireland’s data protection supervisory authority, the Data Protection Commission (DPC), published its annual report for 2019 (Report). The Report is the second report under the General Data Protection Regulation (GDPR) and is the first report based on a full calendar year under the GDPR.

2019 statistics

The Report reveals 2019 has been an exceptionally busy year for the DPC. It contains a number of interesting statistics, in particular:

  • Complaints: 7,215 complaints received; 75% increase from 2018; 29% in “access rights” category; 5,496 complaints concluded, and 457 cross-border processing complaints received through the One-Stop Shop mechanism

  • Breaches: 6,069 valid data breach notifications received; 71% increase from 2018 and 83% related to unauthorised disclosures

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.
IrelandPrivacy
Matheson
Matheson
Article

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.
IrelandPrivacy
Matheson
Matheson
Article

DPC AI Insights Report: Key Takeaways

Ireland's Data Protection Commission has published a comprehensive report examining its supervisory engagement with organizations developing AI products between 2021 and 2025, revealing a tenfold increase in AI-related engagements and highlighting critical compliance areas including lawful basis, transparency, and children's data protection. The report provides detailed insights into the DPC's quasi-regulatory sandbox approach and outlines key observations on data protection obligations for AI technologies,
IrelandPrivacy
Matheson
Matheson