Billy Kelleher (Cork North Central, Fianna Fail)
Link to this: Individually | In context | Oireachtas source

586. To ask the Minister for Employment Affairs and Social Protection if legislation is required in respect of the identification card that is being rolled out, particularly in relation to the area of data protection in view of the multiple proposed uses for this card across Departments; and if she will make a statement on the matter. [41736/17]

Regina Doherty (Meath East, Fine Gael)
Link to this: Individually | In context | Oireachtas source

The purpose of SAFE 2 registration is to verify a person’s identity to a substantial level of assurance. Once identity is verified, a Public Services Card can be issued. This is a physical token which proves that a person has had their identity verified to the SAFE 2 standard and enables them to gain access to public services more efficiently and with a minimum of duplication of effort, while at the same time preserving their privacy to the maximum extent possible.

The primary legislative provisions for SAFE registration and identity verification are set out in the Social Welfare Consolidation Act, 2005 (as amended) as follows -

- Sections 262 and 263B provide for the verification of identity for issuance and use of a PPS Number.

- Sections 263, 263A and 263B provide for the verification of identity for issuance, use and cancellation of a PSC.

- Section 241 provides that a person must satisfy the Minister as to his/her identity when making a new claim and sets out how that can be done.

- Section 247C provides that an existing claimant must satisfy the Minister as to his/her identity, sets out how that can be done and provides for disqualification where an existing claimant fails to so do.

The process used to satisfy the Minister as to identity is the SAFE 2 registration process. The only data that is collected and verified in a SAFE 2 registration process is the limited set of data contained in the Public Services Identity (PSI) dataset which is defined in Section 262 (1) and listed at Section 262 (3) of the Social Welfare Consolidation Act 2005 (as amended). This essentially includes a person’s PPS Number, surname; forename; date of birth; place of birth; sex; all former surnames (if any); all former surnames (if any) of his or her mother; address; nationality; photo; signature.

Only bodies specified in legislation and currently included in Schedule 5 of the Social Welfare Consolidation Act 2005 (as amended) or their agents can share this data or elements of it or can ask for and use the PSC. The full list of specified bodies is contained in Schedule 5 of the Social Welfare Consolidation Act 2005 (as amended). It lists all Ministers, city and county councils, Education and Training Boards, the HSE, voluntary hospitals, schools, institutes of technology, universities, and a range of civil and public service bodies. Such specified bodies are in all cases required to process and store data in accordance with the Data Protection Acts.

The legislative basis for sharing this data is set out in Section 262 (6) of the Act and states “where a specified body has a transaction with a person, the Minister may share the person’s public service identity with the specified body to the extent necessary in respect of that transaction for authentication by the specified body of the person’s public service identity” and “a specified body may use a person’s public service identity in performing its public functions insofar as those functions relate to the person concerned.”

My Department has been implementing SAFE 2 identity verification on a phased basis since 2011. More recently, other public service bodies have begun implementing it for their services. As a consequence, and in addition to services from my Department, SAFE 2 identity verification is now required for -

- First time adult passport applicants in the state.

- Replacement of lost, stolen or damaged passports issued prior to January 2005, where the person is resident in the State.

- Citizenship applications.

- Driver Theory Test Applicants.

- Access to high value or personal online public services, e.g. Social Protection’s MyWelfare and Revenue’s MyAccount services.

The Department of Public Expenditure and Reform recently published the eGovernment Strategy 2017 – 2020 which lists a number of additional public services for which SAFE 2 registration will be required over the next 18 months or so, with others likely to be added over time. That Strategy is available on the Department of Public Expenditure and Reform’s dedicated website at . I have been informed by my colleague the Minister for Public Expenditure and Reform that it is not mandatory for residents in Ireland to be SAFE 2 registered, though a growing number of public services that require proof of identity of individuals will be underpinned by the SAFE 2 standard, ensuring services are provided to the correct people in an efficient manner, while protecting their data. The transition plans, including communications, interim arrangements, exceptions, etc., will be worked through by those Departments and public bodies with the Office of the Government Chief Information Officer (OGCIO) in the Department of Public Expenditure and Reform.

I hope this clarifies the matter for the Deputy.