Dáil Éireann Debate, Tuesday - 20 January 2026
706. Deputy Aidan Farrelly asked the Minister for Social Protection if he and or his officials have conducted a data protection impact assessment with regards to the use of artificial intelligence tools, and, if so, the dates on which this assessment was conducted. [4307/26]
Amharc ar fhreagraA Data Protection Impact Assessment (DPIA) is a process designed to describe the processing of personal data, assess its necessity and proportionality and help manage the risks and freedoms of natural persons resulting from that processing. A DPIA assesses risks and determines the measures to address them. DPIAs are important tools for accountability, as they help controllers such as my Department not only to comply with the requirements of the General Data Protection Regulation (GDPR), but also that appropriate measures have been taken to ensure compliance with the GDPR. DPIAs are conducted for defined projects rather than for an organisation's operations as a whole.
My Department is currently examining the potential future use of Artificial Intelligence (AI) technologies. This has involved active participation in several stakeholder groups, such as, the Department of Enterprise, Trade and Employment's working group on the implementation of EU AI Act. My Department follows the "Guidelines for the Responsible Use of Artificial Intelligence in the Public Service", published in May 2025.
There are no AI systems in place at present which involve processing personal data. The Department has recently established an Innovation Hub, to allow the organisation to assess and evaluate the potential use of AI in a safe and secure manner. This will include conducting DPIAs for any defined projects which involve processing of personal data.
