The number of data breaches recorded by my Department’s Data Protection Officer (DPO) in 2025 was 26 and no data breaches were further reported to the Data Protection Commissioner.
The DPO assesses the level of risk of reported breaches and assigns a risk level to each breach. It is my Department’s policy that all high-risk breaches and certain medium-risk breaches, that may pose a risk to the data subject, are reported to the Data Protection Commissioner. None of the 26 breaches recorded in 2025 were deemed to be high risk or to fall within the parameters of the certain medium-risk breaches.
My Department has a full suite of policies and procedures in place relating to data protection, as required by legislation, including a data breach policy. My Department's DPO oversees robust training for all staff, which is mandatory, and engages in regular data protection awareness-raising campaigns.