A Consultancy Provider - January 2022

• Year: 2022
• Date: 24 January 2022
• Section: Decisions made under data protection act 2018

1

In the matter of the General Data Protection Regulation

DPC Case Reference: IN-20-4-8

In the matter of

Decision of the Data Protection Commission made pursuant to Section 111 of the Data Protection

Act 2018

Further to an own-volition inquiry commenced pursuant to Section 110 of the Data Protection Act

2018

DECISION

Decision-Maker for the Commission:

Helen Dixon

Commissioner for Data Protection

24 January 2022

Data Protection Commission

2 Fitzwilliam Square South

Dublin 2, Ireland

2

Contents

1. Introduction .................................................................................................................................... 3

2. Legal Framework for the Inquiry and the Decision ......................................................................... 3

i. Legal Basis for the Inquiry ........................................................................................................... 3

ii. Legal Basis for the Decision ......................................................................................................... 4

3. Factual Background ......................................................................................................................... 4

4. Findings ........................................................................................................................................... 6

i. Risk Assessment .......................................................................................................................... 8

ii. Findings ..................................................................................................................................... 11

5. Decision on Corrective Measures ................................................................................................. 11

6. Right of Appeal .............................................................................................................................. 14

Appendix: Schedule of Materials Considered for the Purposes of this Decision.................................. 15