Roderic O'Gorman (Dublin West, Green Party) | Oireachtas source

Everything that is done under this legislation has to be compatible with the GDPR because, as we know, the GDPR is EU legislation and, therefore, it takes primacy. As I said, I am examining whether it would be helpful to provide an explicit legal basis in this legislation regarding the processing of data. Article 9 of the GDPR and section 46 of the Data Protection Act allow for the processing of data in cases such as this, so I believe it is protected in that regard.