Jurisdiction(s):
Ireland

Irish DPC fines City of Dublin Education and Training Board €125,000 for GDPR security lapses and failure to notify DPC and data subjects; reprimand and compliance order issued.

Published on: 03 July 2025

Published by an LexisNexis Ireland - Commercial expert

Legal News

Article summary

Statement follows.

Inquiry into City of Dublin Education and Training Board (CDETB)

The DPC has today issued its final decision (Decision), following an investigation into a personal data breach at the CDETB. Acting of its own volition on an own-volition basis, the DPC opened the inquiry in July 2019. It concerned a breach notified by CDETB in November 2018, after the organisation discovered that its webserver had been retaining the personal data of student grant applicants who uploaded information in support of their grant applications via CDETB’s website, as well as the discovery of malware on the webserver. The data processed covered approximately 13,000 data subjects, identifiable by email address, who had submitted supplementary forms through the CDETB website during the years 2017 and 2018. Personal data at risk as a result of the security incident included data subject identity details (name, surname, and date of birth), PPSN, contact details, identification data, and special category data such as data revealing racial or ethnic origin and health data. The DPC evaluated CDETB’s technical and organisational measures intended to ensure the security of personal data processed on its website, taking account of the risks identified and the risks presented by the incident...

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Popular documents

Using the Judicial College Guidelines to assess general damages in personal injury claims

When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...

Tomlin orders in England and Wales: CPR guidance on drafting, confidentiality, approval, variation, enforcement, limitation, CCA issues, court-specific requirements, sample wording and precedents

This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...

Precedent: Deed of Surrender of Lease with Optional Premium, Settlement and Release, Landlord, Mortgagee and Guarantor Consents, Reimbursement and HM Land Registry Provisions (England and Wales)

Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...

Precedent Statutory Declaration: Standard Wording under the Statutory Declarations Act 1835

I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...