Ireland

City of Dublin Education and Training Board

125,000 €

GDPR enforcement action by Data Protection Authority of Ireland on 2025-06-23.

Rank · Sector

#38

of 357 in Public Sector and Education

Rank · Ireland

#19

of 36

Rank · All fines

#428

of 3,050

Case details

Authority: Data Protection Authority of Ireland
Date: 2025-06-23
Controller / Processor: City of Dublin Education and Training Board
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 (1), (2) GDPR, Art. 33 (1) GDPR, Art. 34 (1), (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Irish DPA has imposed a fine of EUR 125,000 on the City of Dublin Education and Training Board. The controller suffered a data breach due to insufficient technical and organisational measures, concerning around 13,000 data subjects. The controller also failed to inform the DPC and the data subjects without undue delay.

Open original source Links to the regulator's original publication or another source.