Dáil Éireann Debate, Thursday - 5 July 2018
91. Deputy Micheál Martin asked the Minister for Finance the training his Department and agencies under its aegis will receive on GDPR legislation; when it will be completed; and if he will make a statement on the matter. [29847/18]
View answerThe Department of Finance is aware of its additional responsibilities as a controller and processor of personal data under GDPR. The Department has pre-empted the changes in legislation and has already held GDPR training for staff. In preparation for GDPR, 5 training sessions were completed by 93 staff. In addition, the Department's Data Protection Officer undertook specialised accredited training.
In the context of future GDPR training, the Department of Finance is conscious of the need to deliver effective training. I, as Minister for Public Expenditure and Reform, have issued a request for tenders in relation to the award of a contract for the provision of service to deliver training for Data Protection Officers within the civil service and bodies across the public sector. The submitted tenders have been assessed and the winning tenderer will be notified shortly.
There are 17 bodies under the aegis of my Department, including the Credit Union Advisory Committee (CUAC) and the Credit Union Restructuring Board (ReBo). The secretariat to the CUAC, which is provided by my Department, has received GDPR training within the Department. ReBo is in the process of being wound down and operation functions ceased on 31 July 2017. The remaining bodies have provided the information requested in the following table.
|
Body |
Training that agencies under the aegis of the Department of Finance will receive on GDPR legislation; when it will be completed. |
|
C&AGs |
All staff receive training on data protection at induction and ongoing training is provided. The Office has a data protection officer who has received specific training in GDPR matters. Ongoing training provided to staff. |
|
Central Bank |
The Central Bank has a significant project in place to ensure GDPR readiness. A key element and deliverable of this project is the provision of training/ awareness on GDPR to all staff. This has been achieved through various fora: - Presentations on GDPR to the Commission and all senior executives - Micro-learning sessions on specific GDPR topics presented to all staff, and - A GDPR eLearning module which all staff are required to complete. All of the training material is available on the Central Bank’s intranet. The staff in the Data Protection Unit has completed a number of external GDPR training courses. |
|
Credit Review Office |
Training took place before 25th May 2018. Staff undertook a one day course with All One Corporate Solutions LTD and also attended the Enterprise Ireland training modules on GDRP. There are no immediate plans for more training. |
|
Disabled Drivers Medical Board of Appeal |
The National Rehabilitation Hospital is currently planning for Staff Awareness training in GDPR. This training is available to the Administrator of the DDMBA. Training is on the roadmap and is under discussion at present. |
|
Financial Services & Pensions Ombudsman |
The FSPO has assessed training needs, identified specific employees who will require early training on the new GDPR reforms and has rolled out data protection training for all employees Training: - General training to all staff is on-going - DPO - Certificate in in Data Protection - In House training in Data Protection for management The aim to have certificate and in-house training for key staff completed by 30 September 2018. All other training is incorporated in the PMDS structure and the FSPO’s training plan. |
|
Investor Compensation Company DAC |
The following training has been completed, and regular updates and refreshers are provided as and when required: - Online training provided by a 3rd Party including end of program test; - Operational training in respect of GDPR procedures and policies; - GDPR and Data Protection Act workshops; - 1-to-1 training as and when required. |
|
Irish Bank Resolution Corporation |
IBRC have appointed a dedicated Data Protection Officer. They took external legal advice and updated their Policies and Procedures as part of a data protection programme to ensure compliance with the provisions of GDPR. A GDPR training and awareness seminar has been held for all IBRC personnel, run by the dedicated Data Protection Officer. Further training will be provided as required. |
|
Irish Financial Services Appeals Tribunal |
IFSAT does not have employees and does not provide GDPR training. Each Member of the Tribunal complies with its GDPR obligations in accordance with their respective professional bodies. |
|
Irish Fiscal Advisory Council |
The Fiscal Council’s Data Protection Officer completed the Institute of Public Administration Certificate in GDPR and Data Protection training course in May 2018. |
|
National Asset Management Agency |
As employees of the National Treasury Management Agency (NTMA), all NAMA officers received GDPR training in advance of the GDPR implementation date as part of the NTMA’s GDPR Readiness Programme and will undertake further online training in Q3 2018 and annually thereafter. This included training on key changes arising from GDPR, key responsibilities of all staff, with particular focus on compliance with data protection principals and liaising with the appointed Data Protection Officer on all data protection related matters. NAMA had an organisation-wide GDPR preparation project with representatives from all sections. This ran from Q1 2017 and is ongoing, so that GDPR knowledge is embedded in all divisions of NAMA. |
|
National Treasury Management Agency |
GDPR training was provided to all employees as part of the NTMA’s GDPR Readiness Programme. In addition, all employees will be required to complete a GDPR online training module in Q3 2018 and annually thereafter. The data protection component of the NTMA’s compliance Induction Training for new employees has also been updated to reflect the requirements of the GDPR legislation. |
|
Office of the Revenue Commissioners |
GDPR Data Protection training was arranged for 150 staff members, comprising Data Protection Liaison Officers and staff from relevant support areas. This was completed in May 2018 and further training will be provided as required. In addition, Data Protection awareness training, which included GDPR awareness, has been provided to approximately 1,900 staff in various locations and this will continue until all locations have been covered. This is ongoing. It is also the intention that the Data Protection Officer will participate in centrally coordinated training aimed at Government departments, when that becomes available later this year. |
|
Social Finance Foundation |
Meetings have been held, at which key staff attended, with Arthur Cox to review the Foundation’s obligations under GDPR. The Foundation holds minimal amounts of personal data and no additional training is proposed. The Foundation’s GDPR plan was reviewed and approved at its May board meeting. |
|
Strategic Banking Corporation of Ireland |
The National Treasury Management Agency (NTMA) assigns staff to the SBCI. As part of the NTMA’s GDPR Readiness Programme, GDPR training was provided to all employees of the SBCI. In addition, all employees will be required to complete a GDPR online training module in Q3 2018 and annually thereafter. The data protection component of the NTMA’s compliance Induction Training for new employees has also been updated to reflect the requirements of the GDPR legislation. Online training and induction training will be ongoing. |
|
Tax Appeals Commission |
A full review of GDPR requirements, including training needs, is currently taking place. A consultancy company has already been contacted for the provision of training and consultancy on an ongoing basis and the TAC is awaiting a response. It is expected that the necessary GDPR training will occur within the next couple of months. |
