The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission

Data Breach at Loyaltybuild: Update


The data breach that affected  some 80,000 customers of Supervalu's Getaway and Axa's Leisure Break loyalty break schemes appears to have taken place in mid-October.  These customers - who should by now have been  notified directly by Supervalu and Axa - should examine their card  transactions since mid-October to identify any such transactions that they did not authorise.  They should also follow the advice of their card provider on any further precautions that might be necessary to protect themselves.


The balance of the approximately half-million other cards that may have been affected by this breach relates mainly  to loyalty schemes operated by Loyaltybuild on behalf of companies based in other European countries.


The Office's investigation is continuing.