The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission

 GPEN Sweep - Internet of Things (IOT)


A Sweep of how Internet of Things (IoT) devices use personal data, and how users are kept informed, is being undertaken this week by 29 data protection authorities around the world.

In Ireland, the review will involve an in-depth look at IoT devices available to users in this jurisdiction such as smart electricity meters, fitness trackers and telematics, and consider how well companies communicate privacy matters to their customers.

The combined results of the Sweep will be published in September. Authorities will also consider action against any devices or services that are found to be breaking data protection laws.

The work is coordinated by the Global Privacy Enforcement Network (GPEN) and follows previous reports on online services for children, website privacy policies and mobile phone apps. GPEN is an informal network of data protection agencies from around the globe. Its aim is to foster cross-border cooperation among privacy regulators in an increasingly global market in which commerce and consumer activity relies on the seamless flow of personal information across borders. Its members seek to work together to strengthen personal privacy protections in this global context. For more about the Global Privacy Enforcement Network, please click on the following link: https://www.privacyenforcement.net/