Dáil Éireann Debate, Wednesday - 11 July 2018
408. Deputy Catherine Murphy asked the Minister for Health the changes he has made to allow access by persons to their own data held by his Department and bodies under its aegis following the introduction of GDPR; and if he will make a statement on the matter. [31473/18]
Amharc ar fhreagra409. Deputy Catherine Murphy asked the Minister for Health the staffing complement and resources of his Department's data protection officer; and if he will make a statement on the matter. [31497/18]
Amharc ar fhreagra410. Deputy Catherine Murphy asked the Minister for Health the data protection impact assessments his Department has commenced since 15 May 2018; and if he will make a statement on the matter. [31514/18]
Amharc ar fhreagraI propose to take Questions Nos. 408 to 410, inclusive, together.
My Department has not commenced any Data Protection Impact Assessments (DPIAs) since the General Data Protection Regulation (GDPR) came into effect on 25 May 2018.
Since 25 May 2018, there is a Privacy Statement on my Department's website setting out information on individuals' rights under Data Protection legislation and rights to access personal data. The Privacy Statement also contains information on how to contact the Department's Data Protection Officer and the Data Protection Commissioner. A Subject Access Request Form is also available on the Department's website.
Information relating to access to personal data held by agencies under the aegis of my Department is an operational matter for the agencies concerned. I have forwarded your question to the Health Service Executive (HSE) for direct reply. For information relating to other bodies the Deputy should contact the relevant Director/CEO/Registrar directly.
My Department's Data Protection Officer is assisted by one part-time head of staff. In addition, my Department is engaged in a tendering process for consultancy services to assist the Data Protection Officer in the roll-out of a programme of implementation to ensure my Department's full compliance with the GDPR. The closing date for receipt of tenders is 13 July 2018.
