The Data Protection Commission (DPC) was warned of the risk of getting taken to court and how a “negative outcome” for them could damage their reputation and drain their resources.
The DPC also raised concerns over a potential failure to secure and retain funding for its work and the challenges posed by a rapid expansion in its staff numbers.
The commission – which has previously admitted to being “acutely strained” by data protection cases involving giant multinationals – identified eight separate challenges in its latest risk register.
The risk that scored most highly was difficulty in securing enough government funding and getting sanction for “key items of expenditure”.