Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE)
Summary: Background informationDate of final decision: 28 August 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)Decision …
Why it matters: This matters if it changes compliance expectations, enforcement posture, or the practical workload for teams that have to translate guidance into controls, evidence, and operating process.
What to watch: Watch for follow-on implementation guidance, regulator clarification, enforcement movement, or changes in how larger organizations operationalize the requirement.
Source: EDPB News