A recent decision by the Personal Data Protection Commission (“PDPC”) emphasised the importance for organisations to, at a minimum,...