My Department, as a data controller, is committed to meeting its obligations under the General Data Protection Regulation (GDPR). The Department’s DPO is responsible for informing and advising the Department and its employees of their obligations under the GDPR, for monitoring compliance with the GDPR and for cooperating with and acting as a point of contact for the Data Protection Commission.
Under the GDPR, there are a number of situations in which consultation and engagement with the Data Protection Commission may take place. These include consultation in relation to Data Protection Impact Assessments and consultations during the preparation of a legislative measure that relates to the processing of personal data.
Some recent engagement with the Data Protection Commission has related to the following:
• the General Scheme of the Child Care (Amendment) Bill 2023 and the Child Care (Amendment) Act 2024;
• the Maternity Protection, Employment Equality and Preservation of Certain Records Act 2024;
• Regulations under the Institutional Burials Act 2022;
• the Mother and Baby Institutions Payment Scheme Act 2023;
• the National Equality Data Strategy.
My Department will continue to engage, as appropriate, with the Data Protection Commission on all matters relating to the processing of personal data under the Department’s remit.