Risk register for Data Protection Commission warns of funding challenges and difficulties in recruiting key staff

The Data Protection Commission (DPC) was warned of the risk of getting taken to court and how a “negative outcome” for them could damage their reputation and drain their resources.

The DPC also raised concerns over a potential failure to secure and retain funding for its work and the challenges posed by a rapid expansion in its staff numbers.

The commission – which has previously admitted to being “acutely strained” by data protection cases involving giant multinationals – identified eight separate challenges in its latest risk register.

The risk that scored most highly was difficulty in securing enough government funding and getting sanction for “key items of expenditure”.