CASE STUDIES 2013 - Data Protection Commissioner - Ireland [2013] IEDPC 2 (2013)

CASE STUDIES 2013 - Data Protection Commissioner - Ireland [2013] IEDPC 2 (2013)

Westmeath County Council contravened Section 2C(3) of the Data Protection Acts by providing personal data to a third party for processing without a contract in place, rendering the disclosure unlawful.

Citation
[2013] IEDPC 2
Parties
Complainant: Complainant; Respondent: Westmeath County Council
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Decision by Data Protection Commissioner
Outcome
Contravention found
Legal Topics
Outsourcing of Data Processing, Requirement for Data Processing Contracts, Disclosure of Personal Data
Data Protection Outsourcing of Data Processing Requirement for Data Processing Contracts Disclosure of Personal Data

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 1 Authorities cited 1 Party arguments 2 Amounts and remedies 1
Sign in to unlock

Parties

Complainant

Complainant

Westmeath County Council

Respondent

Procedural Posture

Data Protection Complaint / Decision by Data Protection Commissioner

Legal Issues

  1. 1 Whether Westmeath County Council unlawfully outsourced customer data to a third party without a contract in place as required by law

Ratio Decidendi

Westmeath County Council contravened Section 2C(3) of the Data Protection Acts by providing personal data to a third party for processing without a contract in place, rendering the disclosure unlawful.

Court Disposition

Contravention found

Orders

  • Formal decision issued against Westmeath County Council for breach of Section 2C(3) of the Data Protection Acts