Data Protection

Dáil Éireann Debate, Thursday - 20 May 2021

Thursday, 20 May 2021

Questions (299)

Fergus O'Dowd

Question:

299. Deputy Fergus O'Dowd asked the Minister for Children, Equality, Disability, Integration and Youth if his Department is fully compliant with GDPR EU requirements and the EU network and Information Security Directive and standards with respect to his Departments IT infrastructure including Article 29 of GDPR which requires that data processors access only the data they need for their task; if ISO 27001 Annex 9 standards on privileged access are fully met; and if he will make a statement on the matter. [27334/21]

Written answers

Minister for Children, Equality, Disability, Integration and Youth

On the broader matter of Departmental compliance with the GDPR, I can state that the Department continues to be actively engaged in meeting the wide range of obligations that the Regulation imposes on data controllers.

Responsibility for implementation of NIS (EU Network and Information Security directive) in Ireland lies with CSIRT-IE, in Department of Communications, Climate Action and Environment. DCEDIY is a member of the CSIRT network.

ICT services within the Department are provided and managed by the Office of the Government Chief Information Officer (OGCIO) and operate to agreed standards including the principle of least privilege.