Catherine Murphy (Kildare North, Social Democrats)
Link to this: Individually | In context | Oireachtas source

236. To ask the Minister for Education and Skills the data protection impact assessments his Department has commenced since 15 May 2018; and if he will make a statement on the matter. [31510/18]

Richard Bruton (Dublin Bay North, Fine Gael)
Link to this: Individually | In context | Oireachtas source

As provided for under Article 35 of the General Data Protection Regulation (GDPR) my Department, as a data controller, will undertake Data Protection Impact Assessments (DPIA) where a type of processing, in a particular using new technologies, and taking into account the nature, scope, context and purposes of processing, is likely to result in a high risk to the rights and freedoms of natural person.

My Department is currently undertaking a DPIA which pre-dates the commencement of the GDPR on 25^thMay, 2018. This DPIA is being undertaken in conjunction with a number of joint data controllers for the proposed processing of personal data in respect of the new Leaving Certificate – Physical Education examinable subject.

Since the 25^thMay my Department in consultation with the Educational Research Centre has commenced a DPIA on the proposed processing of student data in a number of sample schools for the purpose of establishing standards for testing in post-primary schools.

Both of the above DPIA processes are ongoing at present.