The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission

Enforced Subject Access now an Offence


The Minister for Justice and Equality has signed Statutory Instruments 337 and 338, bringing the remaining sections of the Data Protection Acts into force with effect from 18 July 2014. 

Section 4(13) of the Acts, which is now in force, makes it unlawful for employers to require employees or applicants
for employment to make an access request seeking copies of personal data which
is then made available to the employer or prospective employer. This provision
also applies to any person who engages another person to provide a service.