Mr. Dale Sunderland:

There is a role for the line Department to ensure the Bill or the Act, if it gets to that stage, is functioning as intended. There are means by which, for example in a data protection context, a statutory code of conduct can be developed to further define the data protection responsibilities for the handling of personal data. There are tools in the GDPR that may support that overall effort. Of course, it is not the role of the individuals the Senator mentioned to oversee the operation of data controllers in respect of their responsibility and adherence, but there is the right of an individual to make a complaint to the Data Protection Commission, DPC, which will be fully dealt with and an outcome reached in respect of that complaint. That is an option, as is recourse to the courts.