Tuesday, 19th May 2020

The Data Protection Commission (DPC) has issued its first fine under the GDPR. Tusla, the child and family state agency, has been fined €75,000 for three data breaches. It has been reported that the DPC has filed papers in the Circuit Court, in order for the court to confirm the fine. The purpose of this confirmation mechanism, which is required by the Data Protection Act (DPA) 2018, is to ensure that the DPC’s decision to impose a fine has due regard to fair procedures and constitutional justice.