Mick Wallace (Wexford, Independent) | Oireachtas source

I move amendment No. 35:

In page 25, lines 2 to 4, to delete all words from and including ", and" down to and including "subsection" in line 4.

This amendment relates to the designation of data protection officers. We are concerned that the essence of the GDPR and the rights of data subjects might be offset or undermined by the invocation of costs as an excuse. For that reason, we are proposing to delete section 33(3)(d) of the Bill, which refers to "the costs of implementation of any requirement". Data protection officers will be appointed under the GDPR. All public authorities and bodies, including Government Departments, will need to have a data protection officer. Large-scale data processors or organisations that have as a core activity the processing of special categories of data, such as health data, will also be required to have data protection officers. Such officers are an important part of the GDPR's compliance framework. They are supposed to support the compliance of organisations with the GDPR. They should have independence and expert knowledge of data protection.