Data Protection Blog
Practical writing on Irish data protection law — for people enforcing their rights and organisations meeting their obligations.
Your Data Rights
Using the rights the GDPR gives you: access, erasure, footage and records.
14 January 2026
How to Make a Data Access Request That Gets Answered
Framing, targeting and follow-up: the difference between a thin PDF and the full file.
4 February 2026
Getting Your Medical Records: The Complete Route
GP, hospital and private records — the process, the narrow exceptions, deceased relatives.
25 February 2026
The Right to Be Forgotten: How Delisting Really Works
What comes off name searches, what stays findable, and the DPC escalation.
18 March 2026
Your Neighbour's CCTV Is Pointing at Your Home. Now What?
The escalation ladder that works — and the symmetrical response that never does.
8 April 2026
When a Company Ignores Your Data Request
The follow-up that creates the record, and the complaint that writes itself.
Compensation & Complaints
Breaches, damages and the DPC: the honest version of what remedies exist.
21 January 2026
Data Breach Compensation in Ireland: The Honest Guide
The test, what moves the number, and why proportionate strategy matters.
11 February 2026
Kaminski and Non-Material Damage: The Benchmark Case
Workplace CCTV, distress without financial loss, and the calibration everyone now cites.
4 March 2026
Complaining to the DPC, Step by Step
Chronology, documents, the ask — complaints built like case files move faster.
1 April 2026
My Data Was in a Breach. What Should I Actually Do?
Protect, preserve, assess: the hour of work that follows the notification letter.
22 April 2026
Can You Sue for a GDPR Breach? Yes — Here Is the Test
The section 117 action: elements, venue, remedies and the pairing with DPC complaints.
Workplace & Employment
Where data protection meets employment law — our home ground.
28 January 2026
SARs in Employment Disputes: The Quiet Discovery Tool
What to target, what employer responses reveal, and fitting the SAR into strategy.
18 February 2026
Workplace CCTV: What Employers Can Actually Do
The lawful setup, the disciplinary temptation, covert cameras and footage access.
11 March 2026
Monitoring Email and Internet at Work: The Proportionality Line
Policies as battleground, personal use, and why contract consent will not save it.
1 April 2026
WhatsApp Groups and Workplace Privacy
Screenshots in every process, access versus receipt, and group chats in SARs.
22 April 2026
Job References and Data Protection: What Was Said About You
Accuracy duties, your access rights, and the agreed reference that solves it all.
Business Compliance
Proportionate compliance for SMEs, clubs, charities, schools and landlords.
14 January 2026
GDPR Basics for Small Businesses: The Afternoon That Sorts It
The data map, four documents, marketing discipline and request-readiness.
4 February 2026
Does Your Business Need a DPO? Probably Not
The three mandatory triggers, the voluntary appointment trap, the right-sized answer.
25 February 2026
The 72-Hour Rule: What Actually Has to Happen
When the clock starts, phased notification, and the register nobody remembers.
18 March 2026
GDPR for Sports Clubs and Community Groups
Registers, children's photos, the team WhatsApp, vetting records and handovers.
8 April 2026
Landlords and Tenant Data: The File You Keep Is the Case You Have
Proportionate vetting, files written to be read aloud, and retention with an end date.