Details of up to 12,000 Irish passports tied to Spanish cannabis clubs were left freely viewable online. The Data Protection Commissioner confirmed it is engaging with the Irish company that had responsibility for the data. The regulator is now expected to establish how the records were exposed and what action should follow.