Oireachtas Joint and Select Committees

Wednesday, 3 April 2019

Joint Oireachtas Committee on Justice, Defence and Equality

Implementation of the General Data Protection Regulation: Data Protection Commission

Mr. Cathal Ryan:

No, is my answer. When one reads and assesses the guidelines one will find that they suggest a common sense approach. It appears to be that an overly bureaucratic approach is being taken in terms of what SUSI is doing. We must be mindful, as a regulator, that the principle of accountability means that each data controller must make an assessment of how they will approach public representation. Our guidelines were there to influence how the assessment is made. The guidelines are being digested at the moment because they were issued in December of last year. Once public sector bodies and local authorities have considered the guidelines we are then going to follow up by encouraging a standard approach but a less bureaucratic common sense approach. We cannot get into every detail of what they will do in terms of safeguarding particularly sensitive data. One thing we can do in terms of the SUSI application that was mentioned-----