Fergus O'Dowd (Louth, Fine Gael)
Link to this: Individually | In context | Oireachtas source

538. To ask the Minister for Health if any state or semi state bodies which report to his Department are fully compliant with GDPR EU requirements and the EU network and Information Security Directive and standards with respect to their IT infrastructure including article 29 of GDPR which requires that data processors access only the data they need for their task; if ISO 27001 annex 9 standards on privileged access are fully met; and if he will make a statement on the matter. [27360/21]

Stephen Donnelly (Wicklow, Fianna Fail)
Link to this: Individually | In context | Oireachtas source

The information in respect of state bodies, within the scope of the Deputy’s question, is not held by my Department. Under the GDPR, data controllers are responsible for compliance with data protection law in respect of the personal data which they process. State bodies and agencies are accordingly directly responsible for compliance in their own right under legislation. Contact details for these bodies are set out in the attached document, should the Deputy wish to contact the aegis bodies directly with his query.