With the DPC coming under the media spotlight last week we thought the report highlights as outlined below would be a useful read.
Commissioner for Data Protection, Helen Dixon, has launched the Irish Data Protection Commission’s Annual Report for 2021. Highlights include:
- The DPC received 7,469 queries and 3,419 complaints from individuals in 2021 (an increase of 7% on 2020 figures).
- The DPC concluded 7,081 queries and 3,564 complaints, including 1,884 complaints received prior to 2021.
- Total valid breach notifications received in 2021 was 6,549. Of the total recorded breach cases, 95% were concluded in 2021 (6,274 cases).
- In 2021, the DPC concluded 5 large-scale inquiries; sent forward 4 draft decisions to the EU co-decision making process; referred 1 case to the EU dispute resolution mechanism on foot of which the DPC issued a finalised decision; issued a further 9 preliminary drafts of decisions for submissions to regulated entities and complainants in advance of finalisation, and sought submissions on statements of issues or inquiry reports from relevant parties in a further 17 inquiries.
- In September, the DPC announced a conclusion to a GDPR investigation it conducted into WhatsApp Ireland Ltd. The decision was subject to the EU dispute resolution process, after which the DPC imposed a fine of €225 million on WhatsApp, in addition to an order for WhatsApp to bring its processing into compliance.
- In December 2021, the DPC settled legal proceedings with the Department of Social Protection (D/SP) on the D/SP’s processing of personal data when issuing Public Service Card.
- In 2021, the DPC published its finalised Fundamentals for a Child-Oriented Approach to Data Processing, giving much-needed direction to organisations involved in the processing of children’s data.
- In December 2021, the DPC published its Five-Year Regulatory Strategy for 2022-2027, providing clarity to stakeholders as to the direction of travel for the regulatory priorities of the DPC going forward.
- Staff numbers increased to 190 and budget increased to €19.1 million (€23.2 million in 2022).
Full Report
https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-publishes-2021-annual-report