Dublin Confidentiality Exceptions - City Law

General Governance and Administration Leinster 4 Minutes Read ยท published February 11, 2026 Flag of Leinster

Dublin, Leinster public bodies must balance transparency with privacy and legal confidentiality when handling sensitive records. This guide summarises how confidentiality exceptions apply to municipal records held or processed by Dublin City Council, what departments enforce limits, and the practical steps to request, appeal or challenge a disclosure. It covers Freedom of Information (FOI) exceptions, data protection interactions, and where to find official forms and contacts for requests and reviews.

If you need a document withheld because it contains sensitive personal or third-party information, make a clear case when you request review.

Scope of Confidentiality Exceptions

Local records can be withheld under statutory FOI exemptions and by data protection rules where disclosure would infringe privacy or other legal obligations. Dublin City Council applies the FOI Act and data-protection legislation when deciding disclosures and redactions. See the Council's FOI guidance for local practice and contacts.Dublin City Council FOI[1]

Key Legal Bases

  • FOI Act 2014 exceptions for legal professional privilege, commercial sensitivity, and confidential information.
  • Data Protection Act 2018 and GDPR limits where disclosure would unlawfully process personal or special-category data.
  • Other statutory prohibitions where specific Acts prevent release of certain records.
Exemptions are applied case-by-case; public interest balancing is often part of the decision.

Penalties & Enforcement

Enforcement and sanctions for improper handling of sensitive records depend on whether the breach arises from FOI, data protection, or other statutory obligations. Dublin City Council is the primary record holder and the responsible local office for applying exceptions; data-protection breaches may be subject to regulatory action by the Data Protection Commission (DPC). For Council practice and complaint routes see the FOI guidance.Dublin City Council FOI[1]

  • Monetary fines for GDPR breaches: up to c20,000,000 or 4% of global turnover for the most serious infringements, as set out by the Data Protection Commission.DPC guidance[2]
  • Local bylaw or municipal fines specifically tied to record disclosure are not specified on the cited Dublin City Council page.[1]
  • Non-monetary sanctions: orders to rectify processing, requirements to stop processing, records redaction, internal disciplinary action, and court enforcement or injunctions.
  • Escalation: first incidents may be addressed by internal review; serious or repeated breaches can lead to regulatory enforcement by the DPC or civil court remedies where applicable.
  • Appeals: FOI internal review and appeals to the Information Commissioner are available; specific statutory time limits for internal reviews and appeals are not specified on the cited Dublin City Council page or on the consolidated FOI Act page.FOI Act 2014[3]
  • Enforcer and contacts: Dublin City Council FOI Unit and the Data Protection Commission handle different routes for complaints and enforcement.
Where monetary amounts are not listed on a Council page, rely on the DPC or statute for regulatory fines.

Applications & Forms

The primary form for municipal disclosure requests is the Dublin City Council FOI request form available on the Council's FOI pages; submission instructions and any administrative requirements are provided there.Dublin City Council FOI[1] If a data-protection subject-access request is needed instead, guidance and complaint forms are available from the Data Protection Commission.DPC guidance[2]

  • Name: "Freedom of Information Request Form" (see Council page for the current version).
  • Deadlines and fees: specific application fees or time limits are not specified on the cited Council page; check the form or Council guidance for current details.[1]
  • Submission: follow the Council's published options (online form, post, or email) as listed on the official FOI page.

Practical Action Steps

  • Identify the record and note why it is sensitive, including dates, file references and the specific exemption you believe applies.
  • Submit an FOI or data-protection request through Dublin City Council's official channels and attach any supporting justification for confidentiality.
  • If the Council refuses or redacts, request an internal review, then consider an appeal to the statutory reviewer referenced on the Council page.
  • For potential data-protection breaches, lodge a complaint with the Data Protection Commission using its official forms and guidance.
Record and save all correspondence and reference numbers when you apply or appeal.

FAQ

Which records are commonly exempt from release?
Records containing personal data, legal professional privilege, commercially sensitive information, internal deliberations and matters subject to statutory confidentiality are commonly exempt.
Can I get a redacted copy rather than a full refusal?
Yes, public bodies will consider redaction to release non-exempt parts of a record where appropriate; ask for a partially redacted copy in your request.
How do I appeal a refusal?
Request an internal review from Dublin City Council first; if unsatisfied, follow the appeal route set out in the Council's FOI guidance and the FOI Act.

How-To

  1. Prepare: identify the record, relevant dates, and why you need access.
  2. Submit: use Dublin City Council's official FOI request form and include contact details and any supporting justification.
  3. Request review: if refused, ask for an internal review in writing within the Council's stated time frame.
  4. Appeal: if unsatisfied after review, follow the statutory appeal route described in the Council guidance and FOI Act.
  5. Escalate: for data-protection concerns, file a complaint with the Data Protection Commission.

Key Takeaways

  • Confidentiality exceptions are statutory and applied case-by-case with public-interest balancing.
  • Use Dublin City Council's FOI channels first and keep records of all communications.

Help and Support / Resources