Ireland: DPC publishes 2018-2023 case studies booklet
On September 6, 2023, the Data Protection Commission (DPC) published a compilation of 126 case studies covering the first five years of the General Data Protection Regulation (GDPR), from 2018 to 2023. The booklet is designed to assist organizations in achieving compliance with data protection laws, by providing examples of how data protection laws are applied, how to identify non-compliance, and how corrective measures are imposed.
Each case study contains a summary of the facts of the case, the connected regulatory obligations, and the specific measures taken by the DPC.
In particular, the booklet contains case studies regarding:
- access request;
- cross-border complaints;
- data breach notification;
- disclosure/unauthorized disclosure;
- electronic direct marketing;
- the Law Enforcement Directive (LED);
- objection to processing;
- purpose limitation; and
You can read the booklet here.