#
Access/erasure/rectification and deadline mechanisms are well evidenced; restriction, objection and portability sub-modules rely on the general GDPR baseline without a directly retrieved DPC-specific source.
Sub-modules (5)
Access RightGreen
DPC 2024 case studies specifically address subject access request handling as a recurring compliance issue.
Claims (1):
- The DPC's 2024 case-study report addresses recurring issues in handling subject access requests, alongside deletion and rectification requests.
Rectification And ErasureGreen
The same DPC case-study reporting addresses rectification and erasure ('right to be forgotten') requests.
Claims (1):
- DPC case studies published alongside the 2024 Annual Report specifically address rectification and erasure ('right to be forgotten') requests as a recurring compliance theme.
Restriction And ObjectionRed
No DPC-specific source on restriction (Art 18) or objection (Art 21) practice was retrieved in this pass; the general GDPR baseline applies.
Absence provenance: unavailable. Searched: unavailable.
Data PortabilityRed
No DPC-specific portability (Art 20) guidance or enforcement was retrieved in this pass; the general GDPR baseline applies.
Absence provenance: unavailable. Searched: unavailable.
Deadlines And Response WindowsGreen
Section 109 DPA 2018 empowers the DPC to facilitate amicable complaint resolution within a reasonable time, offering data subjects a faster route to remedy than full statutory inquiry.
Claims (1):
- Under Section 109 of the Data Protection Act 2018, the DPC takes steps to arrange or facilitate amicable resolution of complaints where there is a reasonable likelihood of the parties reaching resolution within a reasonable time, offering data subjects a comparatively fast route to vindication of rights.
Data Subject Rights
The Data Protection Commission's draft decision found that Meta Platforms Ireland Limited infringed Articles 12, 15 and 20 GDPR in connection with the handling of data access requests. Fines in the region of EUR 360-430 million are proposed, and the High Court upheld the DPC's power to impose such a fine in a May 2026 judgment, though the final fine amount remains undetermined pending the DPC's own decision — this is a probable-confidence finding, and the matter is understood to still be subject to contestation by way of judicial review. The infringement findings concern how the company handled subject access requests and data portability requests, going to the core data-subject-rights framework under GDPR Articles 12 (transparent information), 15 (right of access) and 20 (right to data portability).
This is one of the two largest live GDPR enforcement matters affecting Ireland this cycle, and its scale — a proposed fine in the hundreds of millions of euro — places it alongside the TikTok cross-border transfer matter as evidence of the DPC's continuing willingness to pursue high-value enforcement against major technology platforms headquartered in its jurisdiction.
Outlook
The fine quantum remains the central open question: the DPC's own final determination, once issued, will resolve whether the figure lands within the proposed EUR 360-430 million range or is adjusted following further process. Judicial review avenues remain available to Meta and may extend the timeline before the matter is fully resolved.
Sources and claims (3)
- ProbableIAPP — The DPC's 2024 case-study report addresses recurring issues in handling subject access requests, alongside deletion and rectification requests.observed
- ProbableIAPP — DPC case studies published alongside the 2024 Annual Report specifically address rectification and erasure ('right to be forgotten') requests as a recurring compliance theme.observed
- ProbableEuropean Data Protection Board — Under Section 109 of the Data Protection Act 2018, the DPC takes steps to arrange or facilitate amicable resolution of complaints where there is a reasonable likelihood of the parties reaching resolution within a reasonable time, offering data subjects a comparatively fast route to vindication of rights.observed