- Enforcing jurisdiction
- Ireland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Tusla Child and Family Agency – €85,000 Fine (Ireland, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Tusla Child and Family Agency was fined €85,000 for not protecting personal data properly, leading to 71 data breaches. This ruling shows that organizations must take data security seriously to avoid penalties. It serves as a wake-up call for all companies handling personal information.
What happened
Tusla reported 71 data breaches due to inadequate security measures for protecting personal data.
Who was affected
Individuals whose personal data was compromised in the 71 reported breaches.
What the authority found
The Irish Data Protection Commission found that Tusla failed to implement sufficient technical and organizational measures to safeguard personal data, violating GDPR requirements.
Why this matters
This ruling underscores the importance of robust data protection practices. Organizations must invest in security measures to prevent breaches and avoid significant fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Irish DPA (DPC) fined Tusla Child and Family Agency EUR 85,000. The controller had reported 71 data breaches to the Irish DPA that occurred between May 25 and November 16, 2018, and concerned the unauthorized access of personal data processed by the controller. After a broad investigation, the DPA concluded that the controller failed to implement adequate technical and organizational measures to protect the data processing and thus violated Art. 32 (1) of the GDPR.
Related Enforcement Actions (1)
Other enforcement actions involving Tusla Child and Family Agency in IE
Details
Fine Date
12 August 2020
Authority
Data Protection Commission
Fine Amount
€85,000
Enforcement Tracker ID
ETid-570
About this data
Cite as: Cookie Fines. Tusla Child and Family Agency - Ireland (2020). Retrieved from cookiefines.eu
Last updated: