Paul Kehoe (Wexford, Fine Gael)
Link to this: Individually | In context

Question 267: To ask the Minister for Health and Children the procedures in place to protect personal data within her Department; and if she will make a statement on the matter. [31242/07]

Mary Harney (Dublin Mid West, Progressive Democrats)
Link to this: Individually | In context

All data held in my Department, both paper and electronic are handled in accordance with the requirements of the Data Protection Acts 1998 and 2003. The Department has policies in relation to the acceptable use of ICT facilities and the handling of manual records including personal information as set out in the Department's Records Management Protocol. The policy in relation to usage of ICT facilities exists to ensure that ICT systems are protected from a range of threats. Procedures exist for the management of computer backups and the secure storage of the requisite media in offsite locations. Prior to the disposal of obsolete equipment, all data are removed in line with best practice. My Department deploys a range of ICT security measures including firewalling, virus, spam and spyware protection to ameliorate any risks to its data.

Handling of manual records including data of a personal nature are covered under the Department's Records Management Protocol which has been issued to all staff. The protocol also covers, where appropriate, the management of records of a personal and/or a sensitive nature. Such records can be flagged as restricted files with limited access to specified named persons. Secure cabinets and store rooms are available for storage of such records. Handling of GRO data is governed by the Civil Registration Act 2004 and the security procedures in place are in accordance with best practice.

My Department is aware of the ongoing challenges in relation to protecting its data and is constantly reviewing its procedures.