DPC annual report reveals 45% jump in data protection complaints

The Irish Data Protection Commission (DPC) has published its Annual Report for 2025. Over the year, the DPC received 16,160 new individual cases, a 45% increase compared to 2024. A total of 11,734 cases were concluded over the twelve-month period, marking a 12% year-on-year rise. Operating as the EU and EEA Lead Supervisory Authority, the DPC also concluded 208 valid cross-border complaints, an increase of 43% on the previous year.

Valid data breach notifications fell by 16% from 2024 to 6,521, with 85% resolved by the end of the year. The DPC notes that almost half of these reported breaches resulted from correspondence sent to the wrong recipients. 

The DPC concluded 275 electronic direct marketing investigations, reflecting an 88% increase over the previous year and issued 50 warning letters about unsolicited marketing communications. It also finalised four large-scale inquiries, imposing multiple reprimands, compliance orders, and administrative fines totalling just over €530.77 million.

Training Announcement: Find out more about our range of independent accredited qualifications from BCS and IAPP. These include professional certifications for practitioners covering data protection and AI governance, information security and risk management, along with access to public information.