Alice-Mary Higgins (Independent) | Oireachtas source

My question is to the Data Protection Commissioner. Are the special categories of personal data under Article 9 a tool her office could be using? How do they relate to observed data, that is, behavioural activity? How does one make sure that observed data, which relate to the Article 9 categories, are included? Is that a key tool which could be used in the regulation of micro targeting?

My second question is directed to the whole panel. The business model has been talked about again and again. One of the key things we can do to disrupt a business model is to apply financial penalties. How important are financial penalties under the GDPR to disrupting the business model? Should a portion of fines collected under GDPR be ring-fenced for digital empowerment or education?