Dublin ETB fined €125,000 for data protection breaches 

The Data Protection Commission concluded after a six-year investigation that the ETB had breached GDPR in multiple ways by both failing to ensure sufficient security for the personal data on its website and by then neglecting to inform the commission of the issue in due course when it was first discovered. Picture: Brian Lawless/PA

Dublin’s Education and Training Board (CDETB) has been fined €125,000 by the Data Protection Commission after the personal details of 13,000 grant applicants were made available to “unauthorised persons”.

The commission concluded after a six-year investigation that the ETB had breached GDPR in multiple ways by both failing to ensure sufficient security for the personal data on its website and by then neglecting to inform the commission of the issue in due course when it was first discovered.