Kathleen Lynch (Cork North Central, Labour) | Oireachtas source

I can only speak from personal experience. I have never been asked for a credit card number on a transit card. Such information is not usually collected which is a protection in itself. If there is a breach then it is incumbent on the holders of the information to inform people. That said, there is a depersonalisation after 30 days and all of the sensitive information which it might have been considered necessary to keep is gone after two years and all of the information is gone after five years. Such a flushing out of the system will probably ensure that there would not be a great deal of information held at any one time. It is incumbent on the holders to inform people where the information is still held.