Results 1-20 of 124 for data protection speaker:Roderic O'Gorman

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Child and Family Agency (8 Feb 2023)

Roderic O'Gorman: The Deputy is referring to an operational matter for Tusla, therefore I have referred this question to Tusla to follow up directly with the Deputy. The interpretation and operation of the General Data Protection Regulation (GDPR) and responses to Subject Access Requests (SAR), are the responsibility of each independent Government body. My Department cannot intercede in Tusla's decision...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Departmental Data (17 Jan 2024)

Roderic O'Gorman: My Department is fully committed to applying the principles contained in the General Data Protection Regulation and associated Irish legislation. The formalisation of data sharing arrangements was introduced by the GDPR in 2018. Details of the sharing of personal or person-specific data are, therefore, not available for the last 20 years. My Department has a wide range of functions...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Data Protection (17 Oct 2023)

Roderic O'Gorman: My Department processes any personal data breaches that occur in accordance with its obligations under the GDPR including reporting requirements to the Data Protection Commission and communication with affected individuals in relation to a breach of their data, as appropriate. The Department has an internal personal data breach reporting protocol. All breaches must be formally notified to the...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Legislative Measures (3 Feb 2022)

Roderic O'Gorman: ...Institutions, the Government committed to progressing this legislation as a priority. My Department gave serious consideration to all possible options, including the question of whether current data protection law is sufficient to allow full unredacted access to birth certificates and birth information in all cases. In December 2020, I received correspondence from the Data Protection...

Written Answers — Department of Children and Youth Affairs: Data Protection (29 Sep 2020)

Roderic O'Gorman: ..., together. These questions relate to specific provisions of the GDPR, the interpretation of that legislation and the Nowak judgement from the Court of Justice of the European Union. Data protection responsibilities fall on the relevant data controller, and it is the data controller who is obliged to interpret and implement data protection requirements and responsibilities, in...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Departmental Data (23 Jan 2024)

Roderic O'Gorman: My Department has a wide range of functions and shares personal data with other bodies in the course of the exercise of those functions or the provision of public services to individuals. Sharing of personal data may also take place in response to a valid lawful request from another public body such as An Garda Síochána. My Department’s remit incorporates responsibility for...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Mother and Baby Homes Inquiries (5 Oct 2021)

Roderic O'Gorman: In order to assist the processing of subject access requests from individuals seeking personal information from the archive and to vindicate the rights of data subjects, my Department has put in place a multi-disciplinary team which includes legal and data protection expertise. Officials in my Department who process SARs from individuals completed data protection training delivered by...

Written Answers — Department of Children and Youth Affairs: Mother and Baby Homes Inquiries (3 Nov 2020)

Roderic O'Gorman: My Department will not be in possession of the relevant data until such time as the Commission transfers the records ahead of its dissolution in February 2021. The Department will ensure that appropriate and legal arrangements are developed during this period to process subject access requests, and comply with GDPR and Data Protection Acts. In the interim I have committed to continued...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Child and Family Agency (1 Jun 2021)

Roderic O'Gorman: ...2014 to provide corporate capacity and capability across a range of shared services. The HSE provide ICT services including responsibility for the security of the hosted environment. Tusla is a data controller and processor under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The HSE is a data processor on behalf of Tusla and a data...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Mother and Baby Homes Inquiries (15 Jun 2021)

Roderic O'Gorman: Following the dissolution of the Mother and Baby Homes Commission of Investigation, my Department became the data controller for all the personal data contained in the records and databases that transferred from the Commission. My Department is responsible for protecting and fulfilling important rights of the individuals who are identified, or identifiable, in the Mother and Baby Homes...

Written Answers — Department of Children and Youth Affairs: Data Protection (14 Oct 2020)

Roderic O'Gorman: A Data Protection Impact Assessment (DPIA) has been conducted by my Department pursuant to Article 6(4) of the General Data Protection Guidelines, in relation to the Commission of Investigation (Mother and Baby Homes and certain related Matters) Records, and another Matter, Bill 2020. A DPIA is considered best practice, and has been carried out by my Department in order to identify,...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Emergency Accommodation (23 Apr 2024)

Roderic O'Gorman: The number of Beneficiaries of Temporary Protection (BOTP) and that of International Protection Applicants (IPA) by local electoral areas is set out in the table below. The data for BOTPs is not usually collated in this manner and data for 16 April 2024 has been compiled in this format. This data refers to accommodation supported or provided by this Department. There is no obligation on a...

Written Answers — Department of Children and Youth Affairs: Mother and Baby Homes Inquiries (3 Nov 2020)

Roderic O'Gorman: As I have previously advised, a Data Protection Impact Assessment (DPIA) has been conducted by my Department pursuant to Article 6(4) of the General Data Protection Guidelines, in relation to the Commission of Investigation (Mother and Baby Homes and certain related Matters) Records, and another Matter, Act 2020. A DPIA is considered best practice, and has been carried out by my Department in...

Written Answers — Department of Children and Youth Affairs: Data Protection (3 Dec 2020)

Roderic O'Gorman: I can confirm that my Department has been the subject of one investigation by the Data Protection Commission since 2016. This investigation was initiated by the Commission on 30 October 2019, and involved a complaint made to it by an individual. The individual alleged that the Department had unfairly processed their personal data by divulging that data to a body under the Department’s...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Mother and Baby Homes Inquiries (18 May 2021)

Roderic O'Gorman: In my reply to Question No. 131 of 6 May 2021 referred to by the Deputy, I indicated that officials in my Department who process subject access request (SARs) from individuals completed data protection training delivered by external consultants to ensure that they are appropriately equipped to respond to requests in respect of the archive.   I have asked my officials to...

Written Answers — Department of Employment Affairs and Social Protection: Mother and Baby Homes Inquiries (7 Oct 2021)

Roderic O'Gorman: In order to assist the processing of subject access requests from individuals seeking personal information from the archive and to vindicate the rights of data subjects, my Department has put in place a multi-disciplinary team which includes legal and data protection expertise. Officials in my Department who process SARs from individuals completed data protection training delivered by...

Written Answers — Department of Children, Equality, Disability, Integration and Youth: Data Protection (1 Jun 2021)

Roderic O'Gorman: The General Data Protection Regulation (GDPR) May 2018 requires parties to “document any personal data breaches, comprising the facts relating to the personal data breach”. GDPR came into force across the European Union on 25 May 2018 and Tusla has been collecting the required data. Tusla has advised that information on breaches was not routinely collected in the years...

Select Committee on Children and Youth Affairs: Work Life Balance and Miscellaneous Provisions Bill 2022: Committee Stage (8 Nov 2022)

Roderic O'Gorman: ...GDPR is EU legislation and, therefore, it takes primacy. As I said, I am examining whether it would be helpful to provide an explicit legal basis in this legislation regarding the processing of data. Article 9 of the GDPR and section 46 of the Data Protection Act allow for the processing of data in cases such as this, so I believe it is protected in that regard.

Joint Committee On Children, Equality, Disability, Integration And Youth: General Scheme of the Birth Information and Tracing Bill 2021: Discussion (Resumed) (28 Sep 2021)

Roderic O'Gorman: Yes, there is a live data protection impact assessment with the Bill. That will be shared when the final draft of the Bill is published. My officials will engage with the Data Protection Commission on that document.

Seanad: Work Life Balance and Miscellaneous Provisions Bill 2022: Committee Stage (31 Jan 2023)

Roderic O'Gorman: ...related to the ability of an employer to seek relative evidence of the circumstances in which an employee is taking leave for medical care purposes. The touchstone of policy development from a data protection perspective is that the design of the system should seek to achieve the minimum invasion of privacy rights, be they third party or otherwise, while also achieving the legitimate...