- Enforcing jurisdiction
- Ireland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Court case 2023 640 JR – Court Ruling (Ireland, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Irish High Court ruled on a case involving data transfers to the UK, stating that existing data protection remedies are sufficient. This decision is significant because it confirms that the safe third country return system is lawful. Businesses should be aware that data transfer regulations can be complex and may require careful navigation.
What happened
The court addressed challenges to the legality of transferring personal data to the UK under Ireland's immigration system.
Who was affected
Two applicants involved in the immigration process who challenged the data transfer decisions.
What the authority found
The court upheld the legality of the data transfers, stating that existing remedies under the Data Protection Act are adequate.
Why this matters
This ruling reinforces the legal framework for data transfers and highlights the need for businesses to stay informed about compliance requirements in cross-border data handling.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected, national law identified, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
In 2023, two applicants challenged decisions under Ireland's safe third country return system. Applicant A argued that the Minister improperly relied on the UK adequacy decisions, which exclude immigration-related data transfers, to justify the return order. Applicant B claimed the system lacked adequate data protection equivalent to the Dublin III Regulation. Both cases centered on the transfer of personal data to the UK during the immigration process, alleging GDPR violations. However, neither applicant pursued data protection remedies with the Irish Data Protection Commissioner. The State defended the data transfers, citing public interest grounds under Article 49(1)(d) GDPR and emphasizing the necessity of data exchange for the functioning of the Common Travel Area (CTA), a long-standing arrangement enabling free movement between Ireland and the UK. The court concluded that alleged GDPR breaches did not invalidate the safe third country return system. It found that existing remedies under the Data Protection Act 2018, such as complaints to the Data Protection Commissioner, were sufficient to address potential violations. Furthermore, the court upheld the legality of data transfers under Article 49(1)(d) GDPR, citing public interest in maintaining fair and effective immigration control and the CTA’s operation. The judgment emphasized that broader questions of GDPR compliance in the immigration context require fuller evidence and more focused proceedings.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 2023 640 JR in IE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
22 March 2024
Authority
DPA HighCourt
About this data
Cite as: Cookie Fines. Court case 2023 640 JR - Ireland (2024). Retrieved from cookiefines.eu
Last updated: