Catherine Connolly (Galway West, Independent)
Link to this: Individually | In context | Oireachtas source

62. To ask the Minister for Social Protection the extent to which other public bodies can authenticate the public service cards; the regulation involving such data sharing; the level of privacy involved; and if he will make a statement on the matter. [17950/17]

Leo Varadkar (Dublin West, Fine Gael)
Link to this: Individually | In context | Oireachtas source

In conjunction with a number of other Government Departments a rules based standard for establishing and authenticating an individual’s identity for the purposes of access to public services called SAFE was developed in the early-mid 2000s. SAFE registration, based primarily on a face-to-face engagement, is the most robust identity registration process in the State and consequently provides a substantial assurance of a person’s identity. Successful registration leads to a verification of a person’s Public Services Identity (PSI) data (which includes elements such as a person’s PPS number, name, address, date of birth, place of birth, nationality, photograph, signature, etc.). It also results in the issue of a Public Services Card (PSC) incorporating the person’s photograph and signature. Accordingly, possession of a PSC gives significant assurance as to the identity of the cardholder. The PSC was introduced to assist people in accessing a range of Government services. This card was designed to replace the free travel pass and the social services card of my Department and to enable other providers of public services to verify the identity of their customers.

Built on top of the PSC infrastructure, a new online identity service called MyGovID provides an easy-to-use, safe and consistent way to securely access online Government services.

In addition to Social Welfare schemes, SAFE registration is now a requirement for both first time adult passport applicants in the state and for citizenship applicants. The Office of the Revenue Commissioners has also started making SAFE a requirement for some of its services. Later this year SAFE will be required for Driver Theory Test applicants and adult passport renewals in the state. In 2018 the requirement will roll out to Driving Licence Applicants and applicants for Student Universal Support Ireland. Other public bodies are also examining how they may be able to use the SAFE infrastructure for their identity requirements.

Section 262 of the Social Welfare Consolidation Act 2005 provides the legal basis for the administration and exchange of PSI data. Persons are required by section 262(4) to provide their PPS Number to Specified Bodies for the purpose of a transaction. Provision is also made in the section for sharing a person’s PSI data between Specified Bodies and such Specified Bodies are expressly authorised to use a person’s PSI data in the performance of their public functions insofar as they relate to the person concerned.

To ensure proper governance of PSI data and to ensure that public bodies comply with the relevant provisions of the Social Welfare Consolidation Act 2005 and data protection law, a Memorandum of Agreement is signed between each Specified Body and my Department regarding access to the Department’s records and the obligations of the body with regard to such access. In addition all organisations provided with access must nominate a Compliance Officer. The Compliance Officer has a number of responsibilities including, the nomination of named users; ensuring that these users understand their responsibilities under the relevant legislation, agree an access protocol and sign a data protection declaration; carrying out random audits; and ensuring that only named users have access to the data. Separately, all accesses are recorded and are subject to audit.

I hope this clarifies the matter for the Deputy.