My Department and one of the Offices under the aegis of my Department have been subject to three formal investigations by the Data Protection Commission from 2016 to date.
The investigation relating to my Department has been concluded with no enforcement action taken by the Data Protection Commission.
A notification of the investigation was issued by the Data Protection Commission to my Department on 19 December 2017.
The investigation concerned an alleged failure by my Department to comply in full with a Subject Access Request. I am unable to provide any further details in relation to the details of this investigation as to do so would compromise the confidentiality of the Case and identify the Parties involved.
One of the Offices under the aegis of my Department has also been the subject of two formal investigations by the Data Protection Commission from 2016 to date.
Notifications of the investigations were issued by the Data Protection Commission on 19 December 2017 and 30 May 2018.
The investigations concerned an alleged failure by the Office to comply in full with an access request and the alleged unfair processing by the Office of a certain person’s personal data, respectively. The investigations were amalgamated as they both relate to a single specific Subject Access Request.
The Data Protection Commission concluded its investigation in September 2020, without taking any enforcement action against the Office. I am unable to provide any further details in relation to the details of this investigation as to do so would compromise the confidentiality of the Case and identify the Parties involved.