Data Protection Commission publishes 2024 Annual Report
19th June 2025
The Data Protection Commission has today launched its Annual Report for 2024 and released the results of its first Public Attitudes Survey.
Highlights of the 2024 Annual Report
- The DPC issued 11 finalised inquiry decisions resulting in administrative fines totalling €652 million during 2024. Multiple reprimands and compliance orders were also imposed. Significant decisions included:
- In October 2024, the DPC announced the conclusion to an inquiry into LinkedIn which assessed the lawfulness, fairness and transparency of LinkedIn’s processing of its EU/EEA members for the purposes of behavioural analysis and targeted advertising. The decision imposed a fine of €310 million on LinkedIn, in addition to an order to bring its processing operations into compliance.
- In December 2024, the DPC issued its final decisions following two inquiries into Meta Platforms Ireland Limited. Both of these own-volition inquiries concerned breaches notified by Meta Platforms Ireland Limited in September 2018 concerning user tokens. The decisions reprimanded Meta and imposed fines totalling €251 million.
- The DPC received 11,091 new cases from individuals in 2024 and concluded 10,510 cases.
- Of all cases received in 2024, 2,673 progressed to the complaint handling process.
- The DPC resolved 2,357 complaints through the formal complaint-handling process (Including 1,367 complaints received prior to 2024).
- The DPC concluded 145 valid cross-border complaints (as EU/EEA Lead Supervisory Authority). 82% of cross-border complaints received since 2018, where DPC is Lead Supervisory Authority, have now been concluded.
- Total valid breach notifications received in 2024 was 7,781, representing an 11% increase on 2023, with 81% of notifications received in 2024 concluded by year end. 50% of these breaches were a result of correspondence being sent to the wrong recipient.
- The DPC provided input and observations on over 56 pieces of proposed legislation in 2024, a significant increase on 2023, when this figure was 37.
- The DPC led efforts to provide greater clarity to the application of data protection requirements in AI model training and development. The DPC requested a statutory opinion from the European Data Protection Board (EDPB) on AI model development which involved EU/EEA regulators working together over a 14-week period. A formal opinion was adopted by the EDPB in December 2024 leading to a harmonised European standard.
- A total of 146 electronic direct marketing investigations were concluded in 2024 and the DPC prosecuted eight companies for the sending of unsolicited marketing communications without consent. The Court directed the companies to make charitable contributions in lieu of a conviction and fine. The donations amounted to €9,725 across all eight cases.
Dr Des Hogan, Chairperson, Commissioner for Data Protection commented:
“The protection of our personal data is more important than ever as our daily transactions now routinely occur through technologies. The DPC’s wide range of activities during the last year points to how fair, consistent regulation can lead to individuals across Europe trusting that their personal data is being used in a lawful and safe manner and that they have control over their data.”
DPC Public Attitudes Survey 2025
To coincide with the publication of the 2024 Annual Report, the Data Protection Commission has also released the results of an independent Public Attitudes Survey. The survey, which was undertaken as part of a mid-point review of the DPC’s Regulatory Strategy 2022-2027, was conducted in May 2025.
Key Findings
- Almost 3 in 4 people believe it to be either quite or very important that organisations designing, developing or using innovative new technologies, products and services comply with data protection requirements, even if it might mean a delay in implementation.
- 2 out of 3 people surveyed claimed that they would trust an organisation a lot less if they misused personal data. Only 4% claimed it would make no difference
- When asked about concerns around technology and data protection:
- 77% of people were concerned with how children’s personal data is being shared and used online;
- 76% of people were concerned with how personal data is used to create a digital profile of themselves which could can be shared, sold or traded; and
- 61% of people were concerned with the use of AI (Artificial Intelligence).
- The results found that generally, people aged 18-34 were less concerned with most aspects of technology and safety of personal data. Those aged 55+ were significantly more concerned.
- Just over half of those surveyed believe that data protection laws ensure companies using information do so responsibly, with 1 in 5 not aware of how the law effects them.
- 70% found that they could trust the Data Protection Commission to uphold their rights to have their personal data protected.
- 50% of those who had interacted with the Data Protection Commission had a more positive opinion of the DPC following that interaction, with only 3% having a more negative view.
Reflecting on these findings, Commissioner Dale Sunderland remarked:
“The results of this public attitudes survey provide valuable insight into how the public views data protection and the role of the Data Protection Commission. The findings indicate strong levels of awareness and recognition of the importance of data protection, particularly in the context of emerging technologies, products and services. The survey also highlights public concerns and expectations around how personal data is used by organisations, while revealing notable differences in perspectives across age groups and regions. This insight is critical as we undertake the mid-term review of the DPC Regulatory Strategy, ensuring our priorities remain focused and responsive in delivering on our responsibilities as a data protection authority."
The Data Protection Commission Annual Report 2024 (PDF, 7.7 MB) is now available to download.
Our Case Studies Booklet 2024 (PDF, 5.7 MB) is now available to download.
You can read key findings from the Annual Report 2024 on our dedicated webpage.