The new DPC website is currently under construction. Our latest guidance in relation to GDPR, which comes into effect on 25th May, 2018, can be found at gdprandyou.ie and via pages on this website starting with "NEW" as per the navigation pane on the left. All other material on this site relates to the previous legislative regime under the Data Protection Acts 1988-2003 ("the Acts"). While the Acts may continue to apply in some circumstances, as of 25th May, 2018 the GDPR is the primary piece of legislation governing data protection.

Data Protection Commission


Powers of the Data Protection Commissioner : Information on the powers assigned to the Data Protection Commissioner under the Data Protection Acts, 1988 and 2003, and under the Electronic Communications Regulations, S.I. 336 of 2011.

Offences and Penalties : General information on the offences as set out within the Data Protection Acts and Electronic Communications Regulations and details of the penalties that may be incurred (including criminal & civil sanctions or forfeitures).

Making a Complaint to the Data Protection Commissioner : Details on how a person can make a complaint to this Office and general information about the investigative process for complaints.

Self Regulation and Codes of Practice: Details on codes of practice which have been formally approved by the Data Protection Commissioner under Section 13 of the Data Protection Acts, and information on how a representative body can initiate a code of practice.

Audits : Information on the audit functions of this Office, including a guidance booklet for organisations explaining the audit process which can be used as a self assessment tool.