Court case 2023 640 JR – Court Ruling (Ireland, 2024)

Court Ruling
DPA HighCourt22 March 2024Ireland
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

In 2023, two applicants challenged decisions under Ireland's safe third country return system. Applicant A argued that the Minister improperly relied on the UK adequacy decisions, which exclude immigration-related data transfers, to justify the return order. Applicant B claimed the system lacked adequate data protection equivalent to the Dublin III Regulation. Both cases centered on the transfer of personal data to the UK during the immigration process, alleging GDPR violations. However, neither applicant pursued data protection remedies with the Irish Data Protection Commissioner. The State defended the data transfers, citing public interest grounds under Article 49(1)(d) GDPR and emphasizing the necessity of data exchange for the functioning of the Common Travel Area (CTA), a long-standing arrangement enabling free movement between Ireland and the UK. The court concluded that alleged GDPR breaches did not invalidate the safe third country return system. It found that existing remedies under the Data Protection Act 2018, such as complaints to the Data Protection Commissioner, were sufficient to address potential violations. Furthermore, the court upheld the legality of data transfers under Article 49(1)(d) GDPR, citing public interest in maintaining fair and effective immigration control and the CTA’s operation. The judgment emphasized that broader questions of GDPR compliance in the immigration context require fuller evidence and more focused proceedings.

Decision AuthorityHigh Court
Full Legal Summary

In 2023, two applicants challenged decisions under Ireland's safe third country return system. Applicant A argued that the Minister improperly relied on the UK adequacy decisions, which exclude immigration-related data transfers, to justify the return order. Applicant B claimed the system lacked adequate data protection equivalent to the Dublin III Regulation. Both cases centered on the transfer of personal data to the UK during the immigration process, alleging GDPR violations. However, neither applicant pursued data protection remedies with the Irish Data Protection Commissioner. The State defended the data transfers, citing public interest grounds under Article 49(1)(d) GDPR and emphasizing the necessity of data exchange for the functioning of the Common Travel Area (CTA), a long-standing arrangement enabling free movement between Ireland and the UK. The court concluded that alleged GDPR breaches did not invalidate the safe third country return system. It found that existing remedies under the Data Protection Act 2018, such as complaints to the Data Protection Commissioner, were sufficient to address potential violations. Furthermore, the court upheld the legality of data transfers under Article 49(1)(d) GDPR, citing public interest in maintaining fair and effective immigration control and the CTA’s operation. The judgment emphasized that broader questions of GDPR compliance in the immigration context require fuller evidence and more focused proceedings.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 2023 640 JR in IE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

22 March 2024

Authority

DPA HighCourt

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 2023 640 JR - Ireland (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: