The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission




Guidance for Retailers issuing e-receipts


The Data Protection Commissioner (DPC) has carried out a series of audits in order to assess how organisations gather and process personal data in the course of providing electronic receipts (e-receipts) to customers. In a number of cases it was found that e-mail addresses, gathered for the purpose of issuing e-receipts, were being used to subsequently issue marketing material. Following on from these audits, the DPC has produced guidance around the use of e-receipts to assist retailers adhere to best practice in this regard.


Click here to read the full Guidance Note