Data Protection Commission Ireland

🎃👻🍬 Happy Halloween from the DPC!

📚 Case Study A data subject provided their personal and financial data to an organisation as part of their relative’s application for a scheme, which was unsuccessful. The refusal letter included a breakdown of the data subject’s personal and financial data, disclosing this information to their relative. 👉 https://lnkd.in/egzb3Kex

📚 Learn about the most frequently asked questions by both individuals who are seeking copies of their personal data, as well as controllers who are struggling to deal with the access requests they are receiving. 🔗 https://lnkd.in/ea24DFaZ

🌍 The transfer of personal data to controllers and processors located outside the EU should not undermine the level of protection of the individuals concerned. Transfers to third countries or international organisations should be done in full compliance with Chapter V of the GDPR. Read our website summary guidance on the provisions in Chapter V of the GDPR 👉 https://lnkd.in/eP7qtSQ3

👮 Depending on the data, it may be the case that an access request falls under the Law Enforcement Directive as opposed to the GDPR. You can request your information from An Garda Síochána (AGS) by following the instructions on the Data Access Request section of the AGS website. It should be noted that a subject access request does not constitute a criminal record check, Garda vetting or a Police Certificate. The data you receive as part of a subject access request from AGS is merely a copy of the personal data AGS may hold on you.

🗃 Case Study An individual lodged a complaint with the DPC after they had viewed a rental property. In their complaint, they alleged that the letting agency had requested excessive personal data during the application process. On this basis, they submitted a complaint to the DPC. Find out what happened 👇

🤝 The DPC were delighted to welcome Ms. Regina Becker of the Luxembourg National Data Service (LNDS) to our Dublin office last week for discussions with our Supervision team on the 1+ Million Genome Initiative - an EU initiative that aims to enable secure access to genomics and the corresponding clinical data across Europe to support groundbreaking research and health policy making and incentivising personalised healthcare treatments with the potential to improve disease prevention - as well as wider issues in relation to data protection in scientific research.

The DPC was delighted to exhibit at yesterday’s International AI Summit in the RDS, Dublin. The event provided a valuable opportunity to engage with people working in the AI field, to highlight our recently published AI Insights report and to emphasise that data protection enables responsible AI innovation.

📚 Case Study This complaint concerned an erasure request to a platform for booking accommodation. The complainant had begun creating an account but stopped before it was complete. In response to the erasure request, the data controller asked for an identity document in order to comply. 👉 https://lnkd.in/es9eD7Yg