What does the Data Protection Commissioner do?

The Data Protection Commissioner is responsible for protecting your rights under the Data Protection Acts. The Commissioner also makes sure that companies and other people obey data protection law.  

 If you think your data protection rights have not been respected, you can complain to the Commissioner. The Commissioner’s office will look into the problem and try to resolve it.  

 To contact the Office of the Data Protection Commissioner, see the contact details at the end of this pack.

 How do the Data Protection Acts protect my personal information?

The Data Protection Acts give you a number of rights. You can contact the Office of the Data Protection Commissioner or visit its website for more information on this. 

 Briefly, the Acts have eight rules for protecting data. Organisations and people must:

• obtain and use personal information fairly;
• keep personal information only for a clearly stated and lawful purpose;
• use and disclose personal information only in ways that meet this purpose;
• keep personal information safe;
• make sure that personal information is accurate, complete and up to date;
• make sure to hold only enough, and not too much, personal information and that it is relevant;
• keep personal information for no longer than is needed for the purpose stated; and
• give you a copy of your personal information if you ask for it in writing.  In a few situations, your right to see your personal records may be limited.

 Do I have to hand over personal details if I don’t want to?

Generally, it is your choice to give someone your personal information. However, in some situations, you must give your personal information to access services. For example, if you want to claim social welfare benefits, you must give information about yourself and your income. You must also give personal information to access services such as hospital care or schools. 

 In addition, you may have to give your personal information to get services from private companies, for example a service from a mobile phone company. You can ask a company why it needs your personal information and, if you are not happy with the answer, you can contact the Office of the Data Protection Commissioner for advice. 

 The important point is that the use of your personal information must follow the eight rules of data protection on page 

 How can an organisation use my personal details?

Under data protection law, a person, company or organisation can only use your personal information for clearly stated purposes. They must explain these purposes to you before you hand over your information. They may not use your personal information for any other purpose. 

 For example, an organisation cannot share your personal information with another organisation unless you give permission. There are some exceptions: for example, an organisation can share your information if it is required to do so by law.

 What can I do if my personal information is given to someone else?

If a company or an organisation has shared your personal information with another organisation without your permission, you should contact it and ask for an explanation. You can also make a complaint to the Data Protection Commissioner, who will advise you how to get the information deleted.  To contact the office of the Data Protection Commissioner, see the contact details at the end of this pack.