RegSol Blog

DPC Annual Report 2019

May 2020

Published in February 2020, highlights of the 2019 Annual Report include:
  • 7,215 complaints received in 2019 representing a 75% increase on the total number of complaints (4,113) received in 2018.
  • 5,496 complaints in total were concluded in 2019.
  • 6,069 valid data security breaches were notified representing a 71% increase on the total number of valid data security breaches (3,542) recorded in 2018.
  • Almost 48,500 contacts were received through the DPC’s Information and Assessment Unit, including 22,200 telephone calls and 22,300 emails.
  • On 31 December 2019, the DPC had 70 statutory inquiries on hand, including 49 domestic inquiries.
  • Six statutory inquiries were opened in relation to multinational technology companies’ compliance with the GDPR, bringing the total number of cross-border inquiries to 21.
  • 457 cross-border processing complaints were received by the DPC through the One-Stop-Shop mechanism.
  • 165 new complaints were investigated under S.I. No. 336 of 2011 in respect of various forms of electronic direct marketing: 77 related to email marketing; 81 related to SMS (text message) marketing; and seven related to telephone marketing. Prosecutions were concluded against four entities in respect of a total of nine offences under the E-Privacy Regulations.
  • The DPC published its findings on certain aspects of the Public Services Card (PSC) following a lengthy investigation. The published findings were targeted at two key issues, namely the legal basis under which personal data is processed and transparency. 
  • The DPC carried out an extensive consultation on the processing of children’s personal data, yielding 80 responses. The feedback from the consultation will be used to develop guidance on the processing of children’s personal data, which is a DPC priority for 2020.
  • The DPC received 712 new Data Protection Officer notifications, bringing the total number to 1,596 at year end.
  • Staffing numbers increased from 110 at the end of 2018 to 140 at the end of 2019, including two additional Deputy Commissioners.
By Judy de Castro - Regulatory Consultant