INVESTIGATIONS UNDERTAKEN BY THE INFORMATION COMMISSIONER

As part of his duties, the Information Commissioner conducts investigations on the application of data protection law in Gibraltar. Investigations may be as a result of information obtained that provokes compliance concerns, a complaint lodged, or information/complaint referred by another data protection authority or another public authority to our office. Investigations are also undertaken into breach notifications received, with appropriate action taken, where necessary and appropriate.

The document below titled “Investigations and Enforcement” provides a table listing all the investigations conducted by the Information Commissioner since 25th May 2018. Within the table there are short summaries relating to each referenced investigation. These include details of whether the Information Commissioner took any enforcement action.

The document below titled “Breach Notifications and Enforcement”, provides a table listing only the breach notifications (relating to Article 33 of the Gibraltar GDPR and section 76 of the DPA), received by the Information Commissioner since the 25th May 2018, in respect of which the Information Commissioner has taken enforcement action.

Please note that references to the DPA and the Gibraltar GDPR within the below linked documents are relevant to the legislation as defined in our Legislation page.