skip to main content

Data Protection Commission gets €3.5 million in extra funding

The extra funding will allow it to take on 40 extra staff, bringing its total workforce to 180
The extra funding will allow it to take on 40 extra staff, bringing its total workforce to 180

The Data Protection Commission has had its budget increased by €3.5 million or 30% in Budget 2019 to €15.2 million.

The higher figure will allow it to take on 40 extra staff, bringing its total workforce to 180.

The news has been welcomed by the commission, which said it would help it to enable it to continue building its capacity as an internationally respected, professional and effective supervisory authority.

In particular, the extra staff will be used to grow the commission's investigative and legal capacity and technology team.

The arrival of the EU's General Data Protection Regulation in May has increased demands on the DPC's operations, with 1,700 complaints and 2,500 breach notifications received since then.

This represents a doubling of complaints and almost three times the number of breach notifications on the same period in 2017. 

Meanwhile, the Commission has said it was not aware of the security issue on the Google+ network which left around 500,000 users private profile data exposed.

The commission says it is now working to understand the details of the incident better, including the nature, impact and risk to individuals.

Google revealed yesterday that it discovered the problem in March during a review of how Google+ shares data with other applications.

It was patched then, but Google chose not to tell users or regulators as it said a review found that no developer had exploited the vulnerability or misused data.

Because the issue arose prior to the introduction of the GDPR regulation, Google did not have to notify European data protection regulators.

While Google's European headquarters is in Dublin, the Data Protection Commission here is not yet the lead supervising authority for the company across the EU under GDPR.

As a result, it is only responsible for regulating how Google protects the data of its Irish users.