On 18 May 2020, the Sanctions College, which reports to the Office of the Data Protection Commissioner, imposed sanctions on three companies for breaches of data protection law. MORE.