Bertie Ahern (Dublin Central, Fianna Fail)

——but the IBTS and the NYBC strongly believe this is an extremely remote possibility. However, they will take all the necessary precautions. I agree with Deputy Gilmore that the credibility of the system and the security of the data of people who give blood are important.

Public service bodies, as well as other organisations or individuals who hold personal data, are subject to the requirements of the Data Protection Acts, 1998 and 2003, which provide for the appropriate compilation, storage and use of such data. Among the requirements placed on organisations and individuals regarding the management of personal data is the need to keep it secure against unauthorised access. The specific statute provision is as follows:

A data controller shall, as respects personal data kept by him or her, comply with the following provisions:. . .(d) appropriate security measures shall be taken against unauthorised access to, or unauthorised alteration, disclosure or destruction of, the data, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

Organisations and individuals that hold personal data have to register with the Data Protection Commissioner. This registration gives the details of the type of personal data held. That applies to all organisations, which must designate a data controller who will have statutory responsibility and ensure compliance by the organisations with the Acts. Many laws and regulations cover unauthorised disclosure and fines on indictment are set out in the legislation.

The Deputy referred to individual Departments. I have seen parliamentary questions and replies over the past two weeks from all Departments about security and data. Those replies should be on the record of the House. The Deputy also asked for the Data Protection Commissioner to examine this issue and I will bring that to his attention.

See this speech in context