I can inform the Deputy that my Department meets with officials from the Data Protection Commission (DPC) on specific matters, when required, but does not meet with the DPC in relation to overall standards of compliance with the GDPR. The role of the DPC is that of an independent supervisory authority and they may contact any department at any time should they have any concerns. Agencies under the remit of my Department appoint their own Data Protection Officers to advise on data protection compliance.
My Department oversees its obligations of compliance with data protection legislation by having a full suite of policies and procedures in place relating to data protection. My Department’s Data Protection Officer (DPO) contacts the DPC whenever necessary in relation to all high risk data breaches that may occur from time to time and liaises with relevant units and the DPC on relevant legislative consultations.
The DPO and her team promote robust annual training to all staff, which is mandatory, engage in regular data protection awareness-raising campaigns and advise all staff on data protection queries.