Enforcement · Data Protection Authority of Ireland EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Departement of Social Security: Insufficient legal basis for data processing
How it connects
Related across sources
Guidance EDPB Annual Report 2021 Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidance EDPB Annual Report 2022 News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). Guidance Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62
Full text
The Irish DPA imposed a fine of EUR 550,000 on the Departement of Social Security. The controller uses the so called SAFE 2 registration process for anyone applying for a Public Services Card. The SAFE 2 registration, which is mandatory, processes biometric data without a sufficient legal basis. The controller also failed to adequately inform data subjects in regards to the processing and to conduct a data protection impact assessment.
Industry: Public Sector and Education
Original document at the source www.dataprotection.ie