Enforcement · Data Protection Authority of Ireland EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Permanent TSB plc: Insufficient technical and organisational measures to ensure information security
Status Not cited by any decision here yet
Summary
The Data Protection Authority of Ireland fined Permanent TSB plc €277,500 for failing to implement sufficient technical and organisational measures to ensure information security, in violation of Article 5(1)(f), Article 32(1), and Article 33(1) of the GDPR. The enforcement action centered on the financial institution's inadequate safeguards and breach notification obligations concerning personal data processing.
We hold a reference to this item, not its text.
enforcementtracker.com Read at the sourceHow it connects
Related across sources
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Apr 4, 2023 Notification Obligation Data Breaches Personal Data
Opinion 07/2025 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the… Opinion ·EDPB May 6, 2025 Personal Data Integrity and Confidentiality Principle Privacy Shield
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 Personal Data Right to Restriction GDPR Subject-Matter and Objectives
art 33 Notification of a personal data breach to the supervisory authority Apr 27, 2016 Data Breaches Notification Obligation Notified Body Reporting and Notification Obligations
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB May 24, 2023 Fines GDPR Article 5 Principles of Processing Supervision