Kerry County Council

Background ......................................................................................................... 3 3. Legal regime pertaining to the inquiry and the Decision ...................................... 4 4. Materials considered ............................................................................................ 8 5. Data controller ..................................................................................................... 9 6. Personal Data ...................................................................................................... 9 7. Analysis and findings ......................................................................................... 10 8. Corrective measures .......................................................................................... 29 9. Right of appeal................................................................................................... 33 3 1. Purpose of this Document 1.1 This document is the final decision of the Data Protection Commission in accordance with Sections 111 and 124 of the Data Protection Act 2018 (‘the Decision’). I make this Decision having considered the information obtained in the separate own volition inquiry conducted by Authorised Officers of the Data Protection Commission. The Authorised Officers who conducted the inquiry provided Kerry County Council (the ‘Council’) with the draft Inquiry Report and the final Inquiry Report. 1.2 This Decision contains a list of corrective powers under Section 127 of the Data Protection Act 2018 arising from the infringements which have been identified herein by the Decision Maker. It should be noted, in this regard, that the Council is required to comply with these corrective powers, and it is open to this office to serve an enforcement notice on the Council in accordance with Section 133 of the Data Protection Act 2018. 2. Background 2.