Catherine Murphy (Kildare North, Social Democrats)
Link to this: Individually | In context | Oireachtas source

585. To ask the Minister for Housing, Planning, and Local Government the changes he has made to allow access by persons to their own data held by his Department and bodies under its aegis following the introduction of GDPR; and if he will make a statement on the matter. [31474/18]

Catherine Murphy (Kildare North, Social Democrats)
Link to this: Individually | In context | Oireachtas source

586. To ask the Minister for Housing, Planning, and Local Government the staffing complement and resources of his Department's data protection officer; and if he will make a statement on the matter. [31498/18]

Catherine Murphy (Kildare North, Social Democrats)
Link to this: Individually | In context | Oireachtas source

587. To ask the Minister for Housing, Planning, and Local Government the data protection impact assessments his Department has commenced since 15 May 2018; and if he will make a statement on the matter. [31515/18]

Eoghan Murphy (Dublin Bay South, Fine Gael)
Link to this: Individually | In context | Oireachtas source

I propose to take Questions Nos. 585 to 587, inclusive, together.

My Department has appointed a Data Protection Officer (DPO) as required under Article 37 of the General Data Protection Regulation (GDPR). One additional staff member works in the Data Protection Unit, alongside the DPO.

Information Officers have also been appointed in each Business Unit to assist with ensuring data protection compliance across the Department.

No Data Protection Impact Assessments (DPIAs) have commenced since 15 May 2018 in my Department. However, the Department is aware of the requirements under Article 35 of the GDPR, which prescribes that a DPIA shall be conducted by a controller where a type of data processing, in particular using new technologies, is likely to result in a high risk to the rights and freedoms of individuals, and in the other specific instances in which controllers must conduct a DPIA.

In the event that a DPIA is required for a proposed data processing activity, this will be carried out in accordance with the Data Protection Commission's published guidance on DPIAs and with the assistance of the Department's DPO.

In relation to the issue of allowing access by persons to their own data held by my Department, all information regarding the process of making a 'Subject Access Request' has been published on the Department's website at

The Data Protection Unit has also developed a Guide for staff on handling and responding to requests from individuals who wish to request access to the their personal data.

Responding to access requests for personal data within the agencies under the aegis of my Department is an operational matter for each agency.Arrangements have been put in place by each agency to facilitate the provision of information by State Bodies directly to members of the Oireachtas. The contact email address for each agency is as below: