Catherine Murphy (Kildare North, Social Democrats) | Oireachtas source

I presume the witnesses have read the Data Protection Commissioner's report about the public services card. Did they get any legal advice about their organisation's role, where it may not have names and addresses or unique identifiers for individuals? Is the authority collecting personal data about people that can then be assigned to them? Has the authority had legal advice on that?