The Data Protection Commission (DPC) recently published its decision following a formal inquiry into the Irish Credit Bureau DAC (the ICB) following the ICB’s notification to the DPC of a personal data breach on the 31 August 2018. The ICB is
Latest from A&L Goodbody LLP - Page 2
European Commission publishes finalised Article 28 SCCs
In addition to issuing new Standard Contractual Clauses (SCCs) for international transfers of personal data to a third country outside the EEA, the European Commission has also published the finalised Article 28 SCCs for use between controllers and processors. The…
CJEU confirms limited derogations from the GDPR’s one-stop-shop mechanism
The Court of Justice of the European Union (CJEU) has confirmed the limited competence of a national supervisory authority, that is not the lead supervisory authority (LSA), to bring legal proceedings in their national courts for alleged infringements of the…
Irish Government Plugs Gap in Protection under SCCs
By John Cahir
The Irish government has moved swiftly to plug a perceived gap in protection under Irish data protection law that had raised doubts about whether Irish law was fit for purpose as a governing law under EU approved standard contractual clauses…
DPC publishes Guidelines on collection of vaccination data of employees
The Data Protection Commission (DPC) has published guidelines addressing the issue of what information employers can process in relation to their employees’ return to the workplace. In particular, the DPC considers the question as to whether employers can lawfully collect…
UK Adequacy Decisions adopted by European Commission
The EU Commission has formally adopted two UK adequacy decisions, one under the GDPR and the other under the Law Enforcement Directive (LED). This means that personal data can continue to flow freely from the EU to the UK, without…
Big Brother was watching: ECHR Grand Chamber rules that UK bulk interception surveillance regime violates human rights
By Grace Moore
On 25 May the Grand Chamber of the European Court of Human Rights, (ECtHR) ruled that the UK’s surveillance regime of bulk interception of online communications violated the European Convention on Human Rights (Convention) in the case of Big Brother…
European Commission publishes finalised SCCs
The European Commission has published its final Implementing Decision on new standard contractual clauses (SCCs) for the transfer of personal data to third countries.
The new SCCs have been expected for some time in order to address the entry into…
DPC completes statutory inquiry into suspected interference with role of DPO
The Data Protection Commission (DPC) has completed its ‘own volition’ inquiry into whether the Department of Employment Affairs and Social Protection interfered with the role of its Data Protection Officer (DPO). The inquiry concerned the process leading to the amendment…
High Court rejects procedural challenge against DPC’s inquiry into EU-US data transfers
The High Court, in a 197-page judgment, has dismissed a legal challenge against a decision by the Data Protection Commission (DPC) to commence an “own volition” inquiry into the applicant’s data transfers to its parent company in the US, and…