Data Protection

Dáil Éireann Debate, Thursday - 20 May 2021

Thursday, 20 May 2021

Questions (256)

Fergus O'Dowd

Question:

256. Deputy Fergus O'Dowd asked the Minister for Foreign Affairs if his Department is fully compliant with GDPR EU requirements, the EU network and Information Security Directive and standards with respect to his Department’s IT infrastructure including Article 29 of GDPR which requires that data processors access only the data they need for their task; if ISO 27001 Annex 9 standards on privileged access are fully met; and if he will make a statement on the matter. [27340/21]

Written answers

Minister for Foreign Affairs

My Department is compliant with obligations as a Data Controller under the General Data Protection Regulation (GDPR) and has implemented the appropriate technical and organisational measures to ensure a level of security appropriate to the risk so that the processing of personal data is performed in accordance with the GDPR. My Department is also compliant with obligations under the EU Network and Information Security Directive. The Department follows the guidance of the National Cyber Security Centre and best international practice in information security management.