Data Protection Act 2018
Data Protection Act 2018 — 88% of in-scope requirements covered.
4 requirements · 4 in scope (3 enforced · 1 designed). The 88% is weighted over the in-scope base.
Source: Data Protection Act 2018. National statute implementing/supplementing Regulation (EU) 2016/679 (GDPR) in Ireland. Substantive obligations resolve to the deep GDPR per-article registry (internal) reused via the framework__jurisdiction edge; this registry maps only the Ireland-specific national deltas.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| GDPR transposition (national basis) | 1 | 1 | 0 | 0 | 0 | 100% |
| Supervisory authority + accountability | 1 | 1 | 0 | 0 | 0 | 100% |
| Breach notification (national channel) | 1 | 0 | 1 | 0 | 0 | 50% |
| Lead supervisory authority (national delta) | 1 | 1 | 0 | 0 | 0 | 100% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
ie-dpa-2018.gdpr-transposition | Data Protection Act 2018 transposes / supplements the GDPR (Reg. (EU) 2016/679) into Ireland national law — the substantive data-protection obligations resolve to the GDPR per-article bijection | enforced | audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1engines: internal, internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md |
ie-dpa-2018.supervisory-authority | Cooperation with the national supervisory authority (the DPC (Data Protection Commission)) — records of processing and the demonstrable-accountability account an AI agent's data processing must produce on request | enforced | audit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md |
ie-dpa-2018.breach-notification | Personal-data breach notification to the DPC (Data Protection Commission) (and affected individuals) within the GDPR Art. 33/34 window, on the national reporting channel | designed | audit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/13-RESILIENCE-LOOP.md |
ie-dpa-2018.lead-supervisory-oss | One-Stop-Shop lead-supervisory-authority role — the DPC is the GDPR lead authority for many cross-border controllers established in Ireland; demonstrable cross-border processing accountability | enforced | audit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md |
Canonical KYE™ surfaces referenced on this page: KYE Protocol™.