- Enforcing jurisdiction
- Ireland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Mediahuis Ireland Group Limited – Dismissed (Ireland, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Mediahuis Ireland Group Limited faced a complaint regarding the processing of a person's medical data in their news reports, but the Data Protection Commission dismissed the case. The ruling underscores the balance between freedom of expression and data protection. Media organizations should be aware of how to navigate these legal boundaries.
What happened
A complaint was filed against Mediahuis Ireland for processing a person's medical data in news articles, which was ultimately dismissed.
Who was affected
The individual whose medical data was reported on in the news articles was affected by the processing of their information.
What the authority found
The Data Protection Commission found that the processing was justified under the right to freedom of expression for journalistic purposes.
Why this matters
This case illustrates the challenges of balancing privacy rights with freedom of expression in journalism. Media companies should understand the legal protections available when reporting on sensitive topics.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Mediahuis Ireland Group Limited (the controller) is a media organization publishing Irish news. A data subject filed a complaint with the Irish Data Protection Commission (DPC) concerning a series of news reports in the three of the controller’s newspapers -- the Irish Independent, the Herald and the Sunday Independent – in which their medical data was processed. The controller claimed that the right to freedom of expression and information for journalistic purposes permitted the processing. Pursuant to section 43 of the Data Protection Act 2018, the DPC initiated an inquiry into the balance between the right to freedom of expression and the right to data protection. Under section 43 of the Data Protection Act, processing of personal data for the purpose of exercising the right to freedom of expression and information exempts a controller from complying with several GDPR provisions. This exemption is only applicable in circumstances where compliance with the provision would be incompatible with exercising the right to freedom of expression. The DPC investigated the applicability of the exemption pursuant to the Section 43 balancing test, considering two things: first, whether the processing was for the purpose of exercising the right to freedom of expression and information; and second, whether compliance with the relevant GDPR provisions would be incompatible with those purposes. The DPC dismissed the complaint, finding that the freedom of expression and information exemption under section 43(1) of the Data Protection Act of 2018 applied to the controller’s reporting. The DPC noted that the balancing test favors freedom of expression where the information is published in the public interest. Public interest is defined as an interest in disclosing information that contributes to a debate of general interest – not merely something that is interesting to the public. In this case, the DPC found that the controller was publishing information in the public interest
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for Mediahuis Ireland Group Limited in IE
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
7 June 2024
Authority
Data Protection Commission
About this data
Cite as: Cookie Fines. Mediahuis Ireland Group Limited - Ireland (2024). Retrieved from cookiefines.eu
Last updated: