The Compliance Institute polled 150 compliance professionals working primarily in Irish financial services organisations.

More than half (51pc) of surveyed compliance professionals in Ireland believe that data protection breaches go unreported within organisations, according to the results of a new survey by the Compliance Institute.

Of this cohort, 19pc of respondents to the survey, which polled 150 compliance professionals working primarily in Irish financial services organisations, said that “many” breaches may go unreported, while 32pc believed that “a few” breaches may go unreported.

Michael Kavanagh, CEO of the Compliance Institute – the professional body for 3,850 compliance professionals in Ireland – said: “Even in organisations with strong compliance cultures, there is a real risk that some breaches are not reported.

“The fact that over half of compliance professionals believe breaches go unreported is a reminder that vigilance is required at every level.”

49pc of respondents said they did not think data breaches “knowingly” went unreported, while 33pc said that in the main, organisations would not intentionally fail to report a breach.

In terms of the reasons for data protection breaches going unreported, 26pc of respondents said the fear of personal accountability would be a factor, while 22pc cited concerns over potential brand damage, and 19pc said regulatory scrutiny or penalties would be the main reason for not reporting breaches.

Kavanagh said: “Perceptions of unreported breaches are not just a reflection of organisational culture; they point to structural challenges in compliance processes. Staff may hesitate to escalate incidents due to fear of personal consequences, and without clear reporting protocols, even unintentional underreporting can occur.

“This leaves both organisations, and the individuals whose data they handle, vulnerable. Organisations must ensure that breaches are promptly identified, reported and investigated. Unreported breaches can have serious consequences, including regulatory action, reputational damage and exposure of sensitive data. Transparency and accountability are critical to building trust and ensuring compliance.”

The Compliance Institute noted that reporting breaches promptly not only meets regulatory obligations but also allows organisations to learn from incidents and strengthen their data protection measures.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.