Alice-Mary Higgins (Independent) | Oireachtas source

There is something fundamentally wrong. The rights of the private sector in terms of competition are carefully and preciously guarded, but those of an individual to see to it that there is a consequence when data protection legislation is breached do not seem to carry the same weight and the imposition of fines in this area is not considered to be necessary. We know and have seen the consequences when someone acts with impunity. There will be investigations and reports, but, in the end, there will be no consequences, except where there was an advantage against a private company in terms of its profits. The principles are not defended properly. It is important that there be consequences when data protection legislation is breached. It may be that funds will be reduced and need to be replaced, but they can be replaced with further conditions and caveats imposed. For example, there is nothing to stop rules from being put in place to state there will be a stay on funds where a fine has been administered. If there was no fine, perhaps moneys might be escrowed, subject to compliance and satisfaction of concerns. Otherwise, what will stop public authorities which are defined widely in the Bill from stating they were caught again and again?