dac beachcroft – Data Protection – Taking Personal Responsibility

In a recent judgment of the Commercial Court, the Court held that a director of a company which was responsible for breaches of the Data Protection Acts was personally liable for those breaches.

Although the judgment in Nolan & Ors v Dildar & Ors [2024] IEHC 4 primarily addresses the scope of data controllers' liability to data subjects for infringement of their rights (previously discussed here), it also highlights the personal responsibility company directors have in respect of data breaches.