Personal data is disclosed in a letter [2008] IEDPC 19

Personal data is disclosed in a letter [2008] IEDPC 19

The disclosure of the data subject's personal information by the public authority was unnecessary for the legitimate interests pursued and did not meet the requirements of section 2A of the Data Protection Acts, constituting a contravention of the Acts.

Citation
[2008] IEDPC 19
Parties
Complainant: Data Subject; Respondent: Public Authority
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Decision by Data Protection Commission
Outcome
amicable resolution; contravention found
Legal Topics
Disclosure of Personal Data, Consent, Legitimate Interest, Section 2 a Data Protection Acts
Data Protection Disclosure of Personal Data Consent Legitimate Interest Section 2 a Data Protection Acts

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 1 Authorities cited 1 Party arguments 2
Sign in to unlock

Parties

Data Subject

Complainant

Public Authority

Respondent

Procedural Posture

Data Protection Complaint / Decision by Data Protection Commission

Legal Issues

  1. 1 Whether the disclosure of personal data by the public authority to a third party without the data subject's consent was lawful under the Data Protection Acts, 1988 & 2003

Ratio Decidendi

The disclosure of the data subject's personal information by the public authority was unnecessary for the legitimate interests pursued and did not meet the requirements of section 2A of the Data Protection Acts, constituting a contravention of the Acts.

Court Disposition

amicable resolution; contravention found

Orders

  • Public authority to issue amended letter omitting irrelevant personal data to solicitor and mediation body, replacing the original letter.