Enforcing jurisdiction
Ireland · Geography does not establish applicable law.
Confirmed applicable legislation

Irish Credit Bureau DAC – €90,000 Fine (Ireland, 2021)

€90,000Data Protection Commission23 March 2021Ireland
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Irish Credit Bureau was fined for a data breach that affected over 15,000 accounts. A technical error led to incorrect information being shared with financial institutions. This case highlights the importance of accurate data management and security for businesses handling sensitive information.

What happened

Irish Credit Bureau was fined for a data breach that inaccurately updated records of 15,120 closed accounts.

Who was affected

Individuals whose credit account records were inaccurately updated and shared with financial institutions.

What the authority found

The Irish data protection authority imposed a fine due to the company's failure to secure personal data and ensure its accuracy.

Why this matters

This ruling serves as a warning for companies to prioritize data accuracy and security. Businesses should implement robust data management practices to avoid similar breaches.

Recorded legal citations
Automatically processed
Art. 5(2) GDPR
Art. 24(1) GDPR
Art. 25(1) GDPR
View original scraped data
Art. 5(2) GDPR
Art. 24(1) GDPR
Art. 25(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 10 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Irish DPA (DPC) has imposed a fine of EUR 90,000 on Irish Credit Bureau (ICB). The fine follows a data breach reported by the controller to the DPA on August 31, 2018. The controller is a credit reporting agency that maintains a database of credit contract performance between financial institutions and borrowers. The data breach occurred when the controller made a code change to its database that contained a technical error. As a result, between June 28, 2018 and August 30, 2018, the ICB database inaccurately updated the records of 15,120 closed accounts. The controller disclosed 1,062 inaccurate account records to financial institutions or affected individuals before the issue was resolved.

Related Enforcement Actions (0)

No other enforcement actions found for Irish Credit Bureau DAC in IE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

23 March 2021

Authority

Data Protection Commission

Fine Amount

€90,000

GDPRhub ID

gdprhub-3484

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Irish Credit Bureau DAC - Ireland (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: