Catherine Murphy (Kildare North, Social Democrats)
Link to this: Individually | In context | Oireachtas source

293. To ask the Minister for Employment Affairs and Social Protection with respect to an e-tender (details supplied) if she will outline the rationale for the inclusion of facial image matching as part of the tender details, at a time when a report from the Data Protection Commission on facial matching processing by the DEASP in connection with the PSC is pending; if she will provide details of the proposals for the processing and use of such data by her Department; the Data Protection Impact Assessments which have been carried out in relation to the use of this technology; and if she will make a statement on the matter. [18674/23]

Heather Humphreys (Cavan-Monaghan, Fine Gael)
Link to this: Individually | In context | Oireachtas source

One of my statutory functions as Minister for Social Protection is the authentication of a person's identity in the manner described, and for the purposes set out, in primary legislation. Once a person has authenticated their identity by way of the SAFE registration process, they are issued with a Public Services Card (PSC) which can be used as proof of identity when accessing public services.

The processing of personal data involved in the SAFE registration process is carried out to help ensure that the person whose identity is being authenticated has not already been authenticated under a different identity. The SAFE registration service not only provides assurance to public bodies as to the identity of the person they are dealing with, it also helps to protect that person against identity theft, and helps ensure that their data protection rights are protected.

The processing of personal data includes the creation and processing of biometric data from a photograph of the person concerned, to enable a check to be carried out as to whether the facial image matches an image already held. A similar type of processing is carried out by the Passport Office and other Governmental authorities in many other countries, with responsibilities in the area of identification and authentication.

The processing of biometric data has been an essential component of the SAFE registration process since it began in 2011. This processing is carried out by the Department on the Department's secure IT infrastructure. This biometric data is not stored on the PSC, nor is it shared with any other public body.

The Department’s current contract for the provision of facial image matching software is due to expire in August 2023 and a Request for Tenders has recently been published, inviting tenderers to bid for a new contract.

A Data Protection Impact Assessment (DPIA) was carried out in respect of an upgrade of the facial image matching system in 2021.

My Department has responded in full to all queries from the Data Protection Commission related to its current investigation into the processing of biometric data during the SAFE registration process and looks forward to receiving the DPC's Draft Report as soon as it has been completed.

I trust this clarifies the matter for the Deputy.