Ms Helen Dixon:

We could probably look to complete some analysis for the Deputy. It is never going to be a static figure. As we take a risk-based approach, it depends on where we identify that issues are arising. As new issues become apparent, we direct our resources to them. We are at the beginning of the long process of driving up the standards of the application of data protection law across the Irish public sector. The GDPR has been in application for approximately 15 months. There is no doubt that the GDPR and the law enforcement directive are not yet fully bedded in. A great deal of work remains to be done. As the investigations conclude over the coming months, the gaps in the standards will start to become clearer.