Disclosure of personal data due to inappropriate security measures [2009] IEDPC 1 (2009)

Disclosure of personal data due to inappropriate security measures [2009] IEDPC 1 (2009)

The airline contravened statutory data protection provisions by disclosing personal data without evidence of appropriate security measures and by further processing the data beyond its original purpose.

Citation
[2009] IEDPC 1
Parties
Applicant: Complainant; Respondent: Airline
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Decision After Investigation
Outcome
Complaint upheld
Legal Topics
Unauthorised Disclosure, Security Measures, Processing of Personal Data
Data Protection Privacy Law Unauthorised Disclosure Security Measures Processing of Personal Data

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 2 Authorities cited 2 Party arguments 2
Sign in to unlock

Parties

Complainant

Applicant

Airline

Respondent

Procedural Posture

Data Protection Complaint / Decision After Investigation

Legal Issues

  1. 1 Whether the airline disclosed personal data without appropriate security measures
  2. 2 Whether the airline contravened statutory data protection obligations

Ratio Decidendi

The airline contravened statutory data protection provisions by disclosing personal data without evidence of appropriate security measures and by further processing the data beyond its original purpose.

Court Disposition

Complaint upheld

Orders

  • Airline to enhance security measures for handling personal data enquiries