INM will not be hit with a fine or other regulatory sanction despite the Data Protection Commission (DPC) making a number of findings against the company in relation a 2014 data breach.
The DPC said the company's actions in a data security incident at the heart of the probe were not in compliance with data protection law.
The lack of fine or other penalty is because the case dated before the introduction of the tough General Data Protection Directive (GDPR), the DPC said.
The case dates back to 2014 when data relating to a number of former and then current staff at INM, including journalists and executives as well as external advisors, was allegedly removed from the company's premises and interrogated by outside contractors at the direction of then INM chairman Leslie Buckley.