Michael Healy-Rae (Kerry, Independent)
Link to this: Individually | In context | Oireachtas source

144. To ask the Tánaiste and Minister for Justice and Equality if he will address a matter (details supplied) regarding the impact data protection is having on Eir customers; and if he will make a statement on the matter. [43146/18]

Charles Flanagan (Laois, Fine Gael)
Link to this: Individually | In context | Oireachtas source

The position is that under the General Data Protection Regulation (GDPR), Member States are required to designate an independent data protection authority with a broad range of tasks and enforcement powers. The Data Protection Commission has been designated under the Data Protection Act 2018 as the data protection authority in this jurisdiction for the purposes of the GDPR. Statutory responsibility for the application of data protection law is vested in the Data Protection Commission. As the Commission enjoys statutory independence in the performance of its tasks and exercise of its enforcement powers under the GDPR and the 2018 Act it would not be appropriate for me to intervene in relation to such matters in my capacity as Minister for Justice and Equality.

The general position is that businesses and other organisations that process the personal data of individuals are required to ensure that personal data are processed in a manner that ensures appropriate security and confidentiality of the data. Taking into account the nature, scope, context and purposes of the data processing operations and the risks for the rights and freedoms of the individuals concerned, such businesses and organisations are required to implement appropriate technical and organisational measures to ensure a level of security appropriate to such risks.