I propose to take Questions Nos. 699 and 700 together.
The recent allegations concerning potential breaches of the GDPR in relation to the selling of personal data by data brokers are concerning. Officials of my Department have met with the Data Protection Commission (DPC) in relation to the serious issues raised and will continue to engage on this important matter.
I am advised that the DPC is continuing to treat this matter very seriously and has used its statutory powers to establish the identity of the companies and the data set concerned. Further, I understand that in respect of one of the companies concerned, based in Ireland, the DPC has attended its office in Dublin. The second company is based in another EU country and the DPC is engaging with the relevant EU Data Protection Authority, in keeping with the procedures provided for under the General Data Protection Regulation.
I am informed that the DPC’s investigation into this matter is ongoing and that it will take further steps as necessary including engagement with relevant authorities. As this matter is now subject to an investigation by the DPC and the DPC is independent in the exercise of its powers and function, I do not propose to comment any further at this time on the specific details of this case.