Written answers

Tuesday, 13 June 2023

Department of Transport, Tourism and Sport

Data Protection

Photo of Peadar TóibínPeadar Tóibín (Meath West, Aontú)
Link to this: Individually | In context | Oireachtas source

330. To ask the Minister for Transport, Tourism and Sport the security protections in place for remote workers within civil and public service organisations to safeguard against personal information of members of the public in audio, text and electronic form being inadvertently exposed to unauthorised third parties within the remote setting; if he can provide a copy of the remote working best practice guidelines for civil and public service workers; and if he will make a statement on the matter. [28636/23]

Photo of Eamon RyanEamon Ryan (Dublin Bay South, Green Party)
Link to this: Individually | In context | Oireachtas source

“My Department takes the issue of data protection and the safety of personal information of members of the general public very seriously. My officials comply with GDPR and other Data Protection legislation in all aspects of their work. If staff are availing of remote working arrangements, they must adhere to my Department’s Blended Working Policy, which references guidance on Remote Working provided by the Data Protection Commission – available here: Protecting Personal Data When Working Remotely | 12/03/2020 | Data Protection Commission. In order to be eligible to participate in my Department’s Blended Working arrangements, staff must undertake cyber awareness training – which has specific sections covering remote working and securing home workspaces.

The departments Data Protection Unit also promotes the safeguarding of personal information within the department and issues notices to staff reminding them of their obligations under the General Data Protection Regulations. The department also has multiple policies and procedures in place around the management of data. The Data Protection Unit actively arranges ongoing Data Protection training for staff throughout the department as required under Section 88(5)(b)(iii) of the Data Protection Act 2018.”

Comments

No comments

Log in or join to post a public comment.