Breachesby GlyphTusla Child and Family Agency
Disclosed Nov 4, 2020Settled
Unredacted documents revealed children's and foster carers' addresses; EUR 75,000 DPC fine
Tusla failed to redact documents shared with third parties, in one case giving a person accused of child abuse the address of the child who complained. The EUR 75,000 fine, confirmed in court in November 2020, was Ireland's first GDPR fine after a statutory inquiry.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 4, 2020 |
| Attack | Insider |
| Data exposed | AddressesChildren's dataPhone numbers |
| Sector | Government · IE |
| Status | Settled |
| Lawsuit or fine | EUR 75,000 Irish DPC fine (confirmed Nov 2020) (about $89K) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.