General Data Protection Regulation

Dáil Éireann Debate, Wednesday - 11 July 2018

Wednesday, 11 July 2018

Ceisteanna (585, 586, 587)

Catherine Murphy

Ceist:

585. Deputy Catherine Murphy asked the Minister for Housing, Planning and Local Government the changes he has made to allow access by persons to their own data held by his Department and bodies under its aegis following the introduction of GDPR; and if he will make a statement on the matter. [31474/18]

Catherine Murphy

Ceist:

586. Deputy Catherine Murphy asked the Minister for Housing, Planning and Local Government the staffing complement and resources of his Department's data protection officer; and if he will make a statement on the matter. [31498/18]

Catherine Murphy

Ceist:

587. Deputy Catherine Murphy asked the Minister for Housing, Planning and Local Government the data protection impact assessments his Department has commenced since 15 May 2018; and if he will make a statement on the matter. [31515/18]

Freagraí scríofa

Minister for Housing, Planning and Local Government

I propose to take Questions Nos. 585 to 587, inclusive, together.

My Department has appointed a Data Protection Officer (DPO) as required under Article 37 of the General Data Protection Regulation (GDPR). One additional staff member works in the Data Protection Unit, alongside the DPO.

Information Officers have also been appointed in each Business Unit to assist with ensuring data protection compliance across the Department.

No Data Protection Impact Assessments (DPIAs) have commenced since 15 May 2018 in my Department. However, the Department is aware of the requirements under Article 35 of the GDPR, which prescribes that a DPIA shall be conducted by a controller where a type of data processing, in particular using new technologies, is likely to result in a high risk to the rights and freedoms of individuals, and in the other specific instances in which controllers must conduct a DPIA.

In the event that a DPIA is required for a proposed data processing activity, this will be carried out in accordance with the Data Protection Commission's published guidance on DPIAs and with the assistance of the Department's DPO.

In relation to the issue of allowing access by persons to their own data held by my Department, all information regarding the process of making a 'Subject Access Request' has been published on the Department's website athttps://www.housing.gov.ie/corporate/compliance/data-protection/how-request-your-personal-information.

The Data Protection Unit has also developed a Guide for staff on handling and responding to requests from individuals who wish to request access to the their personal data.

Responding to access requests for personal data within the agencies under the aegis of my Department is an operational matter for each agency. Arrangements have been put in place by each agency to facilitate the provision of information by State Bodies directly to members of the Oireachtas. The contact email address for each agency is as below:

Agency	Email address
An Bord Pleanála	[e-mail]
Ervia, Gas Networks Ireland	[e-mail]
Housing Sustainable Communities Agency	[e-mail]
Housing Finance Agency	[e-mail]
Irish Water	[e-mail]
Local Government Management Agency	[e-mail]
Ordnance Survey Ireland	[e-mail]
Property Registration Authority	[e-mail]
Residential Tenancies Board	[e-mail]
Valuation Office	[e-mail]