Tusla Child and Family Agency

€75,000

Insufficient legal basis for data processing

Decision Date

May 17, 2020

Authority

Data Protection Authority of Ireland

IE

Sector

Public Sector and Education

Country

IE

Law

GDPR

Status

FINAL

Description

The company has erroneously disclosed personal data, including information about children, to unauthorized persons. In one case, the contact and location data of a mother and a child were disclosed to an alleged offender, and in two other cases, data about children in foster care were improperly disclosed to blood relatives, including in one case to a father in prison.

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.