Information and guidance
Data breach guidance - Data Protection Commission
Data Protection Commission provides data breach guidance through its official business-facing information and contact routes.
Key details
- Provider
- Data Protection Commission
- Who it is for
- Thinking about starting, Startups, Established, Scaling, Sole traders, 1–9 people, 10–49 people, 50–249 people, 250+ people
- Where available
- Ireland-wide
- Format
- Online
- Cost
- Free
- How to access it
- Information and guidance only; organisations notify the DPC of a breach using the online breach notification form referenced on the page.
What this service helps with
Organisations need to understand how and when they must report a personal data breach to the DPC and to affected individuals.
About this support
The Data Protection Commission publishes dedicated breach-notification guidance explaining organisations' obligations under the GDPR. It sets out that organisations must report personal data breaches presenting a risk to affected individuals within 72 hours of becoming aware, and must inform affected individuals directly without undue delay where there is a high risk to them. The page covers the DPC's case-management and reference-number process for breach notifications, points to separate rules for providers of electronic communications networks, and links to a practical guidance note and a quick guide to help controllers assess risk and meet both their notification and communication duties.
Where it is available
Available Ireland-wide.
Ireland-wide
Eligibility
Organisations (data controllers) operating in Ireland that process personal data and may experience a security incident.
Not covered
Guidance is general information and does not replace legal advice
Eligibility is recorded from the provider’s own published information. Confirm the current conditions with the provider before applying.
Sectors
ICT and software