Excessive data sought on penalty points [2009] IEDPC 8 (2009)

Excessive data sought on penalty points [2009] IEDPC 8 (2009)

Requesting penalty point information for five years is excessive when the statutory retention period is three years; data controllers must limit data collection to what is necessary for the stated purpose.

Citation
[2009] IEDPC 8
Parties
Complainant: Complainant; Respondent: X Insurance
Jurisdiction
Ireland
Procedural Posture
Data Protection Complaint / Decision by Data Protection Commission
Outcome
Complaint upheld
Legal Topics
Excessive Data Collection, Motor Insurance, Penalty Points, Data Minimisation
Data Protection Excessive Data Collection Motor Insurance Penalty Points Data Minimisation

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 1 Authorities cited 2 Party arguments 2
Sign in to unlock

Parties

Complainant

Complainant

X Insurance

Respondent

Procedural Posture

Data Protection Complaint / Decision by Data Protection Commission

Legal Issues

  1. 1 Whether X Insurance's request for penalty point information covering five years was excessive under the Data Protection Acts, 1988 and 2003

Ratio Decidendi

Requesting penalty point information for five years is excessive when the statutory retention period is three years; data controllers must limit data collection to what is necessary for the stated purpose.

Court Disposition

Complaint upheld

Orders

  • X Insurance to cease requesting penalty point details for more than three years.
  • X Insurance to revise its quotation process to comply with data minimisation requirements.