The Irish Data Protection Commission is the national authority responsible for the enforcement of the law on ePrivacy, i.e. the EU ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), and the Irish ePrivacy Regulations, implemented by Statutory Instrument (S.I.) No. 336 of 2011. This legislation is separate to, but complements, the General Data Protection Regulation.
Organisations must comply with both laws, but the rules under the ePrivacy legislation apply first when you are considering your organisation’s use of cookies and other tracking technologies. Regulation 5 of the ePrivacy Regulations is the relevant legislation regulating the use of cookies.
In April 2020, the DPC published new guidance on the use of cookies and tracking technologies on websites here:
Guidance%20note%20on%20cookies%20and%20other%20tracking%20technologies
You can also read the DPC’s Report on on the use of cookies and other tracking technologies
( August – December 2019) here:
Data%20Protection%20Commission%20cookies%20sweep%20REVISED%2015%20April%202020%20v.01
Learn more on what happens to your data here:
