Results 1-20 of 29 for data protection segment:6801799

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Cathal Ryan: I will add to that, as it might be of assistance to the Chairman. Under the current law on data protection such as, for example, security purposes, it is up to the data controller to choose the level of security that is appropriate to the data he or she is processing. Among the factors to be included are the resources that can be used to protect data. A lot of it is...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Seamus Carroll: To refer back to a point made earlier by Mr. Lowry, which may have been before the Chairman arrived, there is an obligation under the general data protection regulation for all public authorities and bodies to designate a data protection officer. There will be an officer at a fairly high level in the organisation whose task is to focus on the data protection obligations...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Seamus Carroll: I thank the Chairman and the committee for the opportunity to attend and participate in discussions on the data sharing and governance Bill. I am Seamus Carroll from the Department of Justice and Equality and I am accompanied by Ms Noreen Walsh and Mr. Conor O'Riordan from the civil law reform division of the Department. Reference has already been made by Mr. Lowry and...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Dale Sunderland: Under data protection law, there are very onerous obligations on data controllers to protect and use information in accordance with the law. This is about protecting all of our personal information so it is not used in inappropriate ways. In any organisation, it must be ensured that anyone who accesses data has a legitimate reason for doing so. Looking up information...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Seamus Carroll: I was going to respond to Senator Horkan's question on whether anything will change. It is true that individuals already have data-protection rights and that the Office of the Data Protection Commissioner has certain remedies. The GDPR, however, strengthens the rights of individuals. It also strengthens the range of remedies of the Office of the Data Protection...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Dale Sunderland: I thank the Vice Chairman and members of the committee for the opportunity to meet to discuss the provisions of the general scheme of the data sharing and governance Bill. I am Dale Sunderland, deputy commissioner with responsibility for the consultation function of the data protection authority. My colleague, assistant commissioner Cathal Ryan, is the office's head of...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Dale Sunderland: The Senator raised a very important point indicating what good practice means. It would be a demonstration of how a data controller would meet its obligations. We in the Office of the Data Protection Commissioner do not necessarily set precise obligations because the law is principle based and there are general high-level obligations on data controllers. The onus is...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Dale Sunderland: Others may have views on it, but from our perspective and as Mr. Carroll mentioned, under the general data protection regulation, GDPR, on a legislative basis in national member states, a Union law is required. It depends on the level of interference with an individual's privacy rights. It may be that if there is a low level of interference, the legislation under which...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

...entity with regard to the GDPR. For its purposes, therefore, each Department should be considered as a single entity. Under the GDPR, each Department is required to establish the role of the data protection officer. Article 39 of the GDPR clearly sets out the responsibilities of the data protection officer. We expect any requirement for data sharing to be closely monitored in terms of...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

...is leading on that process at the moment. It started earlier this year. We do take these things very seriously. Also, while we understand, as does EU law, that there is a need for legitimate data sharing and data processing, we believe there is much greater need for transparency about what is happening at the moment. A fundamental part of data protection law is that the individual is...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Barry Lowry: They would be addressed by Departments and obviously such complaints are referred to the Data Protection Commissioner. I guess the answer is "too many" because any complaints at all are too many. That said, as a percentage of the number of transactions, the number of complaints would be relatively low. In terms of the Senator's previous point, one must consider the...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Ms Evelyn O'Connor: Mr. Caroll has outlined the data sharing agreements and how they are quite specific in respect of information held, the purposes for which they may be used and that they will, of course, be published. Organisations must be able to collect data as part of their functions. The Bill will allow the sharing of such data only where an organisation complies with data...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Cathal Ryan: I will take up from what my colleague, Mr. Sunderland, finished. Effectively, the Bill involves the creation of a framework in which to carry out the appropriate assessments under data protection legislation leading to a legal, lawful data sharing arrangement. While the Bill will set out various steps to be taken in a privacy rights impact assessment or a screening...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Barry Lowry: I thank the committee for inviting us today to discuss the data-sharing and governance Bill. Let me start by introducing myself and my colleagues. I am the Government Chief Information Officer and I am accompanied by Ms Evelyn O'Connor and Mr. Pat Keane, both from the Government reform unit, and Mr. Owen Harrison, from the Office of the Government Chief Information...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Mr. Barry Lowry: This legislation would not address a specific departmental matter. Obviously, the general data protection regulation, GDPR, will address organisational deficiencies if they are found out. The GDPR is very strong on penalties. As Mr. Carroll said, it approaches the private and public sectors slightly differently in terms of penalties, but the GDPR looks at the...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

...: It is not something on which we have had in-depth discussions with the Department yet but we will be talking to officials as the drafting of the Bill continues. In regard to large structural data sharing projects, an example could be the individual health identifier, where there is sharing of data with the Department of Social Protection and that is set up under primary legislation....

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Gerry Horkan: Mr. Sunderland was talking about the obligations of data controllers and organisations that hold data. Most of us realise these regulations exist. Is it required that every single user of data on a system must have his or her own audit trail based on what he or she looks at? One hears of passwords being shared and of people being able to access data on general terminals. Is everybody...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

Gerry Horkan: We are meeting to engage in pre-legislative scrutiny of the draft general scheme of data-sharing and governance Bill with officials from the Department of Public Expenditure and Reform and the Department of Justice and Equality, and Mr. Dale Sunderland, deputy commissioner, and Mr. Cathal Ryan, assistant commissioner, from the Office of the Data Protection Commissioner. I welcome Mr. Barry...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

John McGuinness: I do not question that Mr. Carroll wants to get this right but take the example he has given where the data protection officer reports to the highest level. The risk managers in banks have legal obligations. They report to the highest level in the banks and thereafter to the Central Bank. If they had all been doing their jobs, we would not have had the crash. It is fine to define it in...

Joint Oireachtas Committee on Finance, Public Expenditure and Reform, and Taoiseach: General Scheme of Data-Sharing and Governance Bill: Discussion (18 May 2017)

...this Bill, is to start the process. First, it is a question of our having procedures in place for doing the things that public bodies need to do. In other words, it is a matter of making sure the data are accurate and that data changed in one area are updated in others. Ultimately, we would like to have electronic connectivity of databases so master records would be held in one area...