Alex White (Dublin South, Labour) | Oireachtas source

Subsection (8) makes it very clear that the Data Protection Acts "shall apply to any personal data furnished to a person under this section". All the protection in those Acts applies. The Deputy is focusing on the releaser but the agreement protects people and the system from the release of improper information. There is an agreement required to be entered into pursuant to subsection (4) between the releaser and the seeker of the information. It must be done only by way of agreement and that agreement has to be made on the basis of consultation with the Data Protection Commissioner, the great protector of data. That is exactly what the commissioner is.

See this speech in context