Mediahuis Ireland Group Limited – Dismissed (Ireland, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Data Protection Commission dismissed a complaint against Mediahuis Ireland for processing medical data in news reports. They ruled that the company's reporting served the public interest and was protected under freedom of expression. This decision reinforces the idea that journalism can sometimes prioritize public interest over personal data protection.
What happened
Mediahuis Ireland processed medical data in news articles about a data subject.
Who was affected
The individual whose medical data was reported in the newspapers.
What the authority found
The Data Protection Commission found that the processing of personal data was justified under the freedom of expression exemption.
Why this matters
This case shows that media organizations can report on sensitive topics if it serves the public interest. Small business owners should be aware of how freedom of expression can impact data protection rules.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
Mediahuis Ireland Group Limited (the controller) is a media organization publishing Irish news. A data subject filed a complaint with the Irish Data Protection Commission (DPC) concerning a series of news reports in the three of the controller’s newspapers -- the Irish Independent, the Herald and the Sunday Independent – in which their medical data was processed. The controller claimed that the right to freedom of expression and information for journalistic purposes permitted the processing. Pursuant to section 43 of the Data Protection Act 2018, the DPC initiated an inquiry into the balance between the right to freedom of expression and the right to data protection. Under section 43 of the Data Protection Act, processing of personal data for the purpose of exercising the right to freedom of expression and information exempts a controller from complying with several GDPR provisions. This exemption is only applicable in circumstances where compliance with the provision would be incompatible with exercising the right to freedom of expression. The DPC investigated the applicability of the exemption pursuant to the Section 43 balancing test, considering two things: first, whether the processing was for the purpose of exercising the right to freedom of expression and information; and second, whether compliance with the relevant GDPR provisions would be incompatible with those purposes. The DPC dismissed the complaint, finding that the freedom of expression and information exemption under section 43(1) of the Data Protection Act of 2018 applied to the controller’s reporting. The DPC noted that the balancing test favors freedom of expression where the information is published in the public interest. Public interest is defined as an interest in disclosing information that contributes to a debate of general interest – not merely something that is interesting to the public. In this case, the DPC found that the controller was publishing information in the public interest
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for Mediahuis Ireland Group Limited in IE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Mediahuis Ireland Group Limited - Ireland (2024). Retrieved from cookiefines.eu
Last updated: