Inquiry into Ark Life Assurance Company dac | Data Protection Commission

• Judgment Date: 26 September 2022
• Case Outcome: This decision arose from an own-volition inquiry commenced by the DPC pursuant to section 110 of the Data Protection Act 2018 to consider whether Ark Life had complied with the GDPR in relation to its processing operations. The inquiry was initiated after Ark Life had notified 156 personal data breaches to the DPC between December 2018 and May 2020. The data breach notifications primarily concerned the unauthorised disclosure of personal data as a result of address inaccuracies and issues within the postal and email procedures operated by Ark Life.
• Year: 2022
• Date: 26 September 2022
• Judgment Number: IN-21-6-1
• Section: Decisions made under data protection act 2018

1

In the matter of the General Data Protection Regulation

DPC Case Reference: IN-21-6-1

In the matter of Ark Life Assurance Company dac

Decision of the Data Protection Commission made pursuant to Section 111 of the Data Protection Act

2018

Further to an own-volition inquiry commenced pursuant to Section 110 of the Data Protection Act 2018

DECISION

Decision-Maker for the Data Protection Comm ission:

Helen Dixon

Commissioner for Data Protection

26 September 2022

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2, Ireland