New: Raise a concern or Query with the DPC
Raising a concern or query with this office is simple and free. All you need to do is write to the Data Protection Commissioner giving details about the matter, using the relevant form set out below. Note: the DPC requires full and accurate responses to each question posed in these forms.
Before entering any information into the forms below please complete the following steps:
- Download the form and then save the form to your local PC
- Close the form
- Re-open the form from your local PC
Raise a Concern with Us
Do you have a concern about how your data has been processed by an organisation? You should use this form if you wish to contact us about a potential concern / infringement of your data protection rights. Please then send this form to info@dataprotection.ie.
For any general queries please complete the following 'General Query Form'. Prior to completing this form, please ensure that you have raised your concern directly with the relevant organisation and have provided them with sufficient time to respond. A template letter is available on page 1 of the form, which you may wish to use when raising your concern with the relevant organisation in the first instance.
Further guidance on how to complete this form, and more detailed information on what documentation we require in order to review your concern, is available within the form.
Download the 'Raise a Concern' form
General Query:
This office can provide information/guidance in relation to a number of data protection issues that an organisation or individual may face. You should complete this form if you wish to contact us with a data protection query. Please send this form to info@dataprotection.ie.
Please note, if you wish to raise a concern with DPC about how your personal data has been processed you will need to complete the 'Raise a Concern with DPC' form available above.
The information provided by the DPC in response to your query is general information intended to assist you, in the case of a data subject, in availing of your data protection rights, and in the case of a data controller or processor, in fulfilling your data protection obligations and responsibilities. Any information provided does not purport to be a formal sanction or endorsement of the activities of a data controller, data processor, or data subject, and the DPC reserves the statutory right to investigate, or cause to be investigated, any of the provisions of the Data Protection Acts 1988 – 2003, the General Data Protection Regulation, or any other relevant national legislation that have been, are being or are likely to be contravened. Information provided in response to a query does not purport to represent legal advice.
Recipients should seek independent legal advice before acting or refraining from acting upon any information provided by this Office.
Download the Query form
Query or update about an existing case:
Has this office asked you to submit further documentation in relation to your case? Do you have a query about your case? You should use this form if you wish to contact the DPC in relation to an existing case. In particular, this form should be used when submitting further details or documentation about your case.
Download the 'Existing Case Query' form
Evidence that may be required by DPC
Access Requests
There are three types of access request complaints:
- no response to an access request
- incomplete response to an access request
- exemptions to withhold data being applied incorrectly
No response to an access request
If you would like to make a complaint about a data controller failing to respond to your access request we require the following:
-
copy of the access request
-
signed authority from you where a solicitor/representative has made the contact
-
reminder letter sent to the data controller
-
any other relevant correspondence on the matter, for example, if the data controller has sought proof of your identity, evidence that you have provided same
Incomplete response to an access request
If you believe a data controller has not responded in full to your access request we require the following:
-
copy of the access request
-
signed authority from you where a solicitor/representative has made the contact
-
copy of letter sent to the data controller outlining the specific personal data that has not been provided
-
any evidence you have of the existence of the personal data concerned
-
any other relevant correspondence on the matter
Exemptions being used to withhold data that may be applied incorrectly
If you believe that an organisation is withholding data by applying exemptions in an incorrect manner we require the following:
-
copy of the access request
-
signed authority from you where a solicitor/representative has made the contact
-
copy letter sent to data controller seeking an explanation for the use of the exemptions together with any reply received from the data controller
-
your views in writing as to why the exemptions being relied on by the data controller are not validly applied
-
any other relevant correspondence
Direct Marketing
If your complaint is about the receipt of unsolicited direct marketing contact without consent we require the following:
- the email address/phone number/fax number to which the marketing material was sent
- confirmation of who your phone service provider is
- details of where the marketing issued from (the name of the data controller as well as the email address/phone number it issued from)
- copy of the marketing material received:
- for phone call provide date and time of call together with details of the product which the caller attempted to market to you;
- for email provide a copy of the full email received including header and footer information;
- for text message a screenshot of the message or alternatively write out the full text and include date and time sent
- details of any attempts made by you to opt-out of receiving marketing material or calls from the data controller
All other complaints
For all other complaint we require the following:
- details of the specific data protection issue you are raising
- signed authority from you where a solicitor/representative has made the contact
- documentary evidence to support the allegation being made
- copy of relevant correspondence exchanged with the data controller on the matter