Alan Kelly (Tipperary North, Labour)
Link to this: Individually | In context

696. To ask the Tánaiste and Minister for Justice and Equality if he has confidence in the Data Protection Commission. [54881/25]

Jim O'Callaghan (Dublin Bay South, Fianna Fail)
Link to this: Individually | In context

The Data Protection Commission (DPC) is Ireland’s independent Data Protection Authority under the GDPR. Under the Data Protection Act 2018, the DPC is statutorily independent in the performance of its responsibilities and functions, as is required under GDPR.

The Government fully supports the DPC and understands the critical role they play in delivering a stable regulatory environment for business to grow, while protecting citizens’ data protection rights.

The Data Protection Commission plays a key role as one of the largest EU data protection authorities. As the lead supervisory authority in many cross-border cases, Ireland is often the first point of response for new and emerging data protection issues across the EU.

In 2024, the DPC received 11,091 new cases and concluded 10,510. Of these, 2,673 progressed to the complaint handling process. The DPC also resolved 2,357 complaints through the formal complaint-handling process and concluded 145 valid cross-border complaints with other data protection supervisory authorities. Since 2018, 82% of cross-border complaints received, where DPC is Lead Supervisory Authority, have now been concluded.

Since the GDPR coming into force in May 2018 to the end of Q4 2024, the DPC has issued over €3.5 billion in fines. In 2024 alone the DPC issued €652 million in administrative fines.

The Government continues to invest significant resources to support the DPC to deliver on its evolving mandate. In 2025, the DPC was allocated a budget of €29.1 million, and increase of some 150% since 2018. The 2026 budget saw a further 10% increase to the budget of the DPC, with an additional €3 million to support increased staffing. As of July 2025, the DPC had 280 staff.

Having regard to the expanding role of the DPC in the digital regulatory environment; and its organisational structure, governance and business needs, the Government decided on 27 July 2022 to move to a three-Commissioner model as provided for under the Data Protection Act 2018. Commissioners Dr. Des Hogan and Mr. Dale Sunderland were appointed in February 2024 and the Government has recently appointed a third Commissioner, Ms Niamh Sweeney, who joined the Commission on 13 October 2025, following an open competition run by Public Jobs.

The digital regulatory environment is always advancing at pace, and this new three Commissioner model reflects the increased workload for the Commission arising from the suite of the EU’s new digital legislation, including the EU AI Act, the Data Act, the Political Advertising Regulation and the Platform Workers Directive.

I have full confidence that the DPC will continue to perform its vital role.