![Forvis Mazars Expands to Cork with James Byrne&Co](https://www.forvismazars.com/var/mazars/storage/images/_aliases/card/6/8/8/7/61477886-1-eng-GB/58ac8cf2ec33-Forvis-Mazars-Expands-to-Cork-with-James-Byrne-Co-Header.jpg.webp)
Forvis Mazars expands into Cork
Firms plans to grow to 150 employees in the Southwest over the next two years
To date, the Irish DPC has not made public any cases it has concluded under the 2018 Data Protection Act and no civil actions have made it to the courts. As such the interpretations and decisions made during GDPR projects remain unvalidated.
Since the GDPR took effect, the number of data breaches reported each month to the DPC has increased by almost a factor of 3, from an average of 230 reports per month in 2017 to an average of 595 per month since the GDPR became enforceable in May 2018. The type of data breaches reported relate to human error such as individuals sending personal data via email to an incorrect recipient. Complaints received by the DPC have also risen significantly since May 2018 with the average number of complaints received per month almost doubling in comparison to that received in 2017. Most frequent complaint issues: disclosure of personal data without a legal basis, access requests, and unfair processing. |
Minister for Health, Simon Harris, has introduced the Health Research Regulations. The Data Sharing and Governance Bill 2018, sponsored by Paschal Donohoe is currently before the Seanad.
We understand that a number of organisations are seeking to use public interest as a lawful basis of processing special category data. This requires a separate regulation for each instance and these regulations will need to pass through the Dáil and Seanad. We expect this process may suffer delays and result in some organisations accepting the risk that they do not have a lawful basis for processing in the short term.
The change in reporting thresholds has caused confusion and uncertainty for some data controllers. Pre-GDPR guidance encouraged ‘high-risk’ types of breaches to be reported to the DPC. In the new legislation, we are simply told that breach reporting is not required where the breach is ‘unlikely’ to result in a risk to the rights and freedoms of the data subjects involved.
It’s not an easy decision as to where an organisation sets the bar for data breach reporting. If too many low-risk data breaches are reported, there is the chance of over-reporting and attracting unwarranted focus from the DPC. The flip side is that if you don’t report an event the DPC could deem you have not met your reporting obligations Hopefully this will become clearer over the next few months.
On August 29th, the EU released the study; The future EU-UK relationship. It analysed how data flows between the UK and EU will be impacted by Brexit. It concludes:
The current legislation will not allow data flows between the UK and EU as:
Larger organisations generally updated their high-risk core platforms to account for GDPR in advance of May 25th. We see that many organisations are now assigning a budget for 2019 to GDPR related technology. Based on a straw poll of our clients, the most common problems that organisations are seeking to use the tchnology to address are:
It is not yet clear whether effective solutions are available for individual organisations. In addition, the business requirements for these solutions are not yet fully understood, in some instances, it is too early to define a business case. It seems many vendors are selling solutions that have been developed or significantly updated recently. Some of these solutions are not yet mature and there appear to be many version updates coming in Q4 2018. At this point putting an envelope for spend in the 2019 budget may be sensible. How it will be used may be less clear.
Project tail - 5 most common areas where GDPR project activities remain outstanding:
This website uses cookies.
Some of these cookies are necessary, while others help us analyse our traffic, serve advertising and deliver customised experiences for you.
For more information on the cookies we use, please refer to our Privacy Policy.
This website cannot function properly without these cookies.
Analytical cookies help us enhance our website by collecting information on its usage.
We use marketing cookies to increase the relevancy of our advertising campaigns.