Regina Doherty (Meath East, Fine Gael) | Oireachtas source

The public services card was provided for in legislation in 1998 when it was introduced alongside the personal public service, PPS, number to replace the previous revenue and social insurance number, the old RSI number, and the social service card, the old SSC. It acts as an identifier for access to a broad range of services. Successive Governments since have reaffirmed this policy both in Government decisions and through legislation.

In October 2017, the Data Protection Commission commenced an investigation into the standard authentication framework environment-public services card, SAFE-PSC, process and delivered its final report to the Department on 15 August this year. On 17 September, the Department published the report of the Data Protection Commission together with a summary of our own response to the findings of that report.

On the basis of strong legal advice from the Attorney General's office, I am satisfied that the processing of personal data related to the PSC does, in fact, have a robust legal basis, that the retention of data is lawful and that the information provided to users satisfies the requirements of transparency.

I am advised that the findings in the Data Protection Commission report do not have the force of law until such time as they are formalised in an enforcement notice. To date, the Data Protection Commission has not issued an enforcement notice, although I understand one is being prepared by the Data Protection Commission. On receipt of it, the Department will consider the scope and terms of the enforcement notice and we will respond appropriately at that time.

In the meantime, the Department will continue to conduct the SAFE registration process and issue PSCs. It will also retain the supporting documentation collected as part of the SAFE process. I trust this clarifies the matter for the Deputy.

See this speech in context