I can assure the Deputy that an effective governance framework is in place to enable my Department to meet its obligations under data protection legislation. This governance framework was adopted in accordance with the Department’s obligations under the GDPR.
Sharing of personal data with other public sector bodies is for specified, explicit, and legitimate purposes. Personal data is shared only where there is a lawful basis for sharing and the Department has deemed that the provision of such data is both necessary and proportionate.
The type of information shared only when necessary and in accordance with our official functions includes information authenticating identity or citizenship. The effective and efficient delivery of passport and consular services for Irish citizens is a central component of the Department's work and on occasion the sharing of personal data may be necessary. This includes the sharing of personal data for law enforcement purposes with competent authorities as defined under Section 69 of the Data Protection Act 2018.
A schedule of personal or person-specific data sets shared with other bodies set out in the Question is not available for the last twenty years.
My Department is committed to fulfilling our obligations under the GDPR and Data Protection Acts 1988-2018, including providing information to the public where personal data is shared with other public bodies. Details about the data we share and the lawful basis for the sharing are set out in our Data Protection Information Notices which are published on our website.
In addition to this and as part of our ongoing compliance with data protection legislation, my Department was party in 2022 to a series of data sharing agreements with other public sector bodies, which were published for public consultation. These agreements were finalised in line with the full commencement of the Data Sharing and Governance Act (DSGA) 2019 which gave further effect to the GDPR and Data Protection Acts 1988-2018.
