DPC sought more funding amid staffing battle

Regulator warns Government managing AI issues becoming more demanding

The Data Protection Commission had sought an increased budget to deal with staffing issues. Photograph: Dara Mac Dónaill
The Data Protection Commission had sought an increased budget to deal with staffing issues. Photograph: Dara Mac Dónaill

The Data Protection Commission (DPC) asked for an extra €4 million in funding to hire new staff and manage potential fallout from artificial intelligence being trained using people’s personal information.

The DPC said it was facing an uphill battle in hiring suitably qualified employees especially for legal and technology roles while competing with the private sector. In a pre-budget submission, the DPC said its role was becoming ever “more complex” due to the impact of AI and other fast-developing technologies.

It also said there was a growing expectation of “proportionate, timely and effective enforcement” in dealing with big tech companies and others.

In a letter to the Department of Justice in July, the DPC said it was looking for a €32.4 million budget for 2025 which included an extra €2.8 million for pay and just over €1.2 million for non-pay expenditure. Yet the allocation announced in Budget 2025 ended up being €29 million.

READ SOME MORE

Their pre-budget plea said: “There is a heightening weight of expectation from individuals, organisations, peer regulators, legislators and governments across the EU that the DPC must regulate effectively and consistently in a fast-evolving digital world.”

It warned artificial intelligence was already presenting challenges as personal data was “prevalent in the development, training, and deployment of AI applications.”

The letter added that while a new AI Act was awaited from Government, it was up to them for now to regulate the personal information aspect of the technology. The DPC said the extra €4 million would allow them to make progress in “clearing older large-scale cross border inquiries.”

They pointed to a “growing caseload” and constantly evolving technology, all of which created “significant challenges for the protection of personal data.”

“[Additional funding will help build] technology expertise and capacity to keep abreast with fast developing technologies such as Al where the DPC has a lead EU role in ensuring compliance with data protection law,” the letter added.

Extra resources would be needed too for the growing number of their decisions that were being challenged in the Irish and European courts, it noted.

“These cases – all noteworthy in terms of novelty and complexity – are expected to move to active litigation next year.”

Other funding requirements were for upskilling staff, hiring an outside recruitment company to help hire new people, and for the fit-out of their new HQ in Dublin.

The DPC praised Government support of their role and said this had led to the imposition of fines totalling €2.85 billion since 2018. It hoped to bring staff members up to 260 by the end of this year and to 320 by the end of 2025, according to the letter.

The letter added: “We trust the case for the DPC’s funding requirement is clear and well founded. “Our request is also made in the context of the DPC’s onerous responsibility to supervise and enforce on behalf of hundreds of millions of Europeans, the Irish-based global internet, technology and social media companies’ compliance with EU data protection law.”

  • Sign up for the Business Today newsletter and get the latest business news and commentary in your inbox every weekday morning
  • Opt in to Business push alerts and have the best news, analysis and comment delivered directly to your phone
  • Join The Irish Times on WhatsApp and stay up to date
  • Our Inside Business podcast is published weekly – Find the latest episode here