Dáil Éireann Debate, Tuesday - 30 September 2025
230. Deputy Barry Ward asked the Tánaiste and Minister for Defence if he will report on a television programme (details supplied) of 18 September 2025 in which it was alleged that the phones and geolocation of defence force personnel, while on duty and/or in defence forces campuses, can be tracked by a third party; and if he will make a statement on the matter. [51568/25]
Amharc ar fhreagraThe Government affords the highest priority to the State’s security and to the security of individuals.
in particular, the safety and security of its personnel is paramount to Óglaigh na hÉireann. The Defence Forces implements a broad range of measures to ensure security is maintained in both the physical and cyber domains. Cyber security awareness is one of the operational pillars in the DF’s Cyber Defence Strategy with cyber hygiene briefings, best practice and procedures an integral feature of the DF’s operational culture.
The Defence Forces take several proactive steps to ensure security is maintained in sensitive locations including minimising electronic footprint in these areas. The Defence Forces ensures it is capable of tapering the electronic footprint of their personnel and operations depending on the nature of any operations they conduct.
The Defence Forces will continue to review and update their policies and procedures in relation to emerging technologies and ensure that their personnel are kept up-to-date to any potential risks that may face them and how to counter them.
Under EU and national law, the Data Protection Commission (DPC) is the State body which has regulatory authority in the area of privacy and data security. Location data can reveal a significant amount of information about individuals, including information about an individual’s habits and personality, and information that is inherently sensitive. Information about an individual’s location can also pose a serious risk to their security and wellbeing.
In relation to the disclosures made in the media recently, the DPC is currently working to identify the data broker in question. If they are headquartered in Ireland, the DPC will take action themselves. and, if they are headquartered in another EU country, it will engage with the relevant Data Protection authority to deal with the matter.
