As Ann Déscrolláil
Cuir Déscrolláil ar siúl chun an dá leagan a scrolláil le chéile.
Number 25 of 1988
DATA PROTECTION ACT, 1988
ARRANGEMENT OF SECTIONS
Preliminary
Section | |
Protection of Privacy of Individuals with regard to Personal Data
Collection, processing, keeping, use and disclosure of personal data. | |
The Data Protection Commissioner
Registration
Miscellaneous
Provisions in relation to certain non-residents and to data kept or processed outside State. | |
Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data done at Strasbourg on the 28th day of January, 1981
The Data Protection Commissioner
Public Authorities and Other Bodies and Persons
Acts Referred to | |
1971, No. 24 | |
1956, No. 45 | |
Civil Service Regulation Acts, 1956 and 1958 | |
1963, No. 33 | |
Companies Acts, 1963 to 1987 | |
1954, No. 18 | |
1977, No. 30 | |
1984, No. 6 | |
1937, No. 38 | |
1941, No. 23 | |
1963, No. 1 | |
Petty Sessions (Ireland) Act, 1851 | 1851, c. 93 |
1970, No. 11 | |
Public Offices Fees Act, 1879 | 1879, c. 58 |
1947, No. 44 | |
Number 25 of 1988
DATA PROTECTION ACT, 1988
Preliminary
Interpretation and application of Act.
1.—(1) In this Act, unless the context otherwise requires—
“appropriate authority” has the meaning assigned to it by the Civil Service Regulation Acts, 1956 and 1958;
“back-up data” means data kept only for the purpose of replacing other data in the event of their being lost, destroyed or damaged;
“civil servant” has the meaning assigned to it by the Civil Service Regulation Acts, 1956 and 1958;
“the Commissioner” has the meaning assigned to it by section 9 of this Act;
“company” has the meaning assigned to it by the Companies Act, 1963;
“the Convention” means the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data done at Strasbourg on the 28th day of January, 1981, the text of which is set out in the First Schedule to this Act;
“the Court” means the Circuit Court;
“data” means information in a form in which it can be processed;
“data controller” means a person who, either alone or with others, controls the contents and use of personal data;
“data equipment” means equipment for processing data;
“data material” means any document or other material used in connection with, or produced by, data equipment;
“data processor” means a person who processes personal data on behalf of a data controller but does not include an employee of a data controller who processes such data in the course of his employment;
“data subject” means an individual who is the subject of personal data;
“direct marketing” includes direct mailing;
“disclosure”, in relation to personal data, includes the disclosure of information extracted from such data and the transfer of such data but does not include a disclosure made directly or indirectly by a data controller or a data processor to an employee or agent of his for the purpose of enabling the employee or agent to carry out his duties; and, where the identification of a data subject depends partly on the data and partly on other information in the possession of the data controller, the data shall not be regarded as disclosed unless the other information is also disclosed;
“enforcement notice” means a notice under section 10 of this Act;
“financial institution” means—
(a) a person who holds or has held a licence under section 9 of the Central Bank Act, 1971, or
(b) a person referred to in section 7 (4) of that Act;
“information notice” means a notice under section 12 of this Act;
“local authority” means a local authority for the purposes of the Local Government Act, 1941;
“the Minister” means the Minister for Justice;
“personal data” means data relating to a living individual who can be identified either from the data or from the data in conjunction with other information in the possession of the data controller;
“prescribed”, in the case of fees, means prescribed by regulations made by the Minister with the consent of the Minister for Finance and, in any other case, means prescribed by regulations made by the Commissioner with the consent of the Minister;
“processing” means performing automatically logical or arithmetical operations on data and includes—
(a) extracting any information constituting the data, and
(b) in relation to a data processor, the use by a data controller of data equipment in the possession of the data processor and any other services provided by him for a data controller,
but does not include an operation performed solely for the purpose of preparing the text of documents;
“prohibition notice” means a notice under section 11 of this Act;
“the register” means the register established and maintained under section 16 of this Act;
and any cognate words shall be construed accordingly.
(2) For the purposes of this Act, data are inaccurate if they are incorrect or misleading as to any matter of fact.
(3) (a) An appropriate authority, being a data controller or a data processor, may, as respects all or part of the personal data kept by the authority, designate a civil servant in relation to whom it is the appropriate authority to be a data controller or a data processor and, while the designation is in force—
(i) the civil servant so designated shall be deemed, for the purposes of this Act, to be a data controller or, as the case may be, a data processor, and
(ii) this Act shall not apply to the authority,
as respects the data concerned.
(b) Without prejudice to paragraph (a) of this subsection, the Minister for Defence may, as respects all or part of the personal data kept by him in relation to the Defence Forces, designate an officer of the Permanent Defence Force who holds a commissioned rank therein to be a data controller or a data processor and, while the designation is in force—
(i) the officer so designated shall be deemed, for the purposes of this Act, to be a data controller or, as the case may be, a data processor, and
(ii) this Act shall not apply to the Minister for Defence,
as respects the data concerned.
(c) For the purposes of this Act, as respects any personal data—
(i) where a designation by the relevant appropriate authority under paragraph (a) of this subsection is not in force, a civil servant in relation to whom that authority is the appropriate authority shall be deemed to be its employee and, where such a designation is in force, such a civil servant (other than the civil servant the subject of the designation) shall be deemed to be an employee of the last mentioned civil servant,
(ii) where a designation under paragraph (b) of this subsection is not in force, a member of the Defence Forces shall be deemed to be an employee of the Minister for Defence and, where such a designation is in force, such a member (other than the officer the subject of the designation) shall be deemed to be an employee of that officer, and
(iii) a member of the Garda Síochána (other than the Commissioner of the Garda Síochána) shall be deemed to be an employee of the said Commissioner.
(4) This Act does not apply to—
(a) personal data that in the opinion of the Minister or the Minister for Defence are, or at any time were, kept for the purpose of safeguarding the security of the State,
(b) personal data consisting of information that the person keeping the data is required by law to make available to the public, or
(c) personal data kept by an individual and concerned only with the management of his personal, family or household affairs or kept by an individual only for recreational purposes.
Protection of Privacy of Individuals with regard to Personal Data
Collection, processing, keeping, use and disclosure of personal data.
2.—(1) A data controller shall, as respects personal data kept by him, comply with the following provisions:
(a) the data or, as the case may be, the information constituting the data shall have been obtained, and the data shall be processed, fairly,
(b) the data shall be accurate and, where necessary, kept up to date,
(c) the data—
(i) shall be kept only for one or more specified and lawful purposes,
(ii) shall not be used or disclosed in any manner incompatible with that purpose or those purposes,
(iii) shall be adequate, relevant and not excessive in relation to that purpose or those purposes, and
(iv) shall not be kept for longer than is necessary for that purpose or those purposes,
(d) appropriate security measures shall be taken against unauthorised access to, or alteration, disclosure or destruction of, the data and against their accidental loss or destruction.
(2) A data processor shall, as respects personal data processed by him, comply with paragraph (d) of subsection (1) of this section.
(3) Paragraph (a) of the said subsection (1) does not apply to information intended for inclusion in data, or to data, kept for a purpose mentioned in section 5 (1) (a) of this Act, in any case in which the application of that paragraph to the data would be likely to prejudice any of the matters mentioned in the said section 5 (1) (a).
(4) Paragraph (b) of the said subsection (1) does not apply to backup data.
(5) (a) Paragraph (c) (iv) of the said subsection (1) does not apply to personal data kept for historical, statistical or research purposes, and
(b) the data or, as the case may be, the information constituting such data shall not be regarded for the purposes of paragraph (a) of the said subsection as having been obtained unfairly by reason only that its use for any such purpose was not disclosed when it was obtained,
if the data are not used in such a way that damage or distress is, or is likely to be, caused to any data subject.
(6) (a) The Minister may, for the purpose of providing additional safeguards in relation to personal data as to racial origin, political opinions, religious or other beliefs, physical or mental health, sexual life or criminal convictions, by regulations amend subsection (1) of this section.
(b) Regulations under this section may make different provision in relation to data of different descriptions.
(c) References in this Act to subsection (1) of this section or to a provision of that subsection shall be construed in accordance with any amendment under this section.
(d) Regulations under this section shall be made only after consultation with any other Minister of the Government who, having regard to his functions, ought, in the opinion of the Minister, to be consulted.
(e) Where it is proposed to make regulations under this section, a draft of the regulations shall be laid before each House of the Oireachtas and the regulations shall not be made until a resolution approving of the draft shall have been passed by each such House.
(7) Where—
(a) personal data are kept for the purpose of direct marketing, and
(b) the data subject concerned requests the data controller in writing to cease using the data for that purpose,
the data controller shall, as soon as may be and in any event not more than 40 days after the request has been given or sent to him—
(i) if the data are kept only for the purpose aforesaid, erase the data,
(ii) if the data are kept for that purpose and other purposes, cease using the data for that purpose, and
(iii) notify the data subject in writing accordingly and, where appropriate, inform him of those other purposes.
Right to establish existence of personal data.
3.—An individual who believes that a person keeps personal data shall, if he so requests the person in writing—
(a) be informed by the person whether he keeps any such data, and
(b) if he does, be given by the person a description of the data and the purposes for which they are kept,
as soon as may be and in any event not more than 21 days after the request has been given or sent to him.
Right of access.
4.—(1) (a) Subject to the provisions of this Act, an individual shall, if he so requests a data controller in writing—
(i) be informed by the data controller whether the data kept by him include personal data relating to the individual, and
(ii) be supplied by the data controller with a copy of the information constituting any such data,
as soon as may be and in any event not more than 40 days after compliance by the individual with the provisions of this section; and, where any of the information is expressed in terms that are not intelligible to the average person without explanation, the information shall be accompanied by an explanation of those terms.
(b) A request for the information specified in subparagraph (i) of subsection (1) (a) of this section shall, in the absence of any indication to the contrary, be treated as including a request for a copy of the information specified in subparagraph (ii) of the said subsection (1) (a).
(c) (i) A fee may be payable to the data controller concerned in respect of such a request as aforesaid and the amount thereof shall not exceed such amount as may be prescribed or an amount that in the opinion of the Commissioner is reasonable, having regard to the estimated cost to the data controller of compliance with the request, whichever is the lesser.
(ii) A fee paid by an individual to a data controller under subparagraph (i) of this paragraph shall be returned to him if his request is not complied with or the data controller rectifies or supplements, or erases part of, the data concerned (and thereby materially modifies the data) or erases all of the data on the application of the individual or in accordance with an enforcement notice or an order of a court.
(2) Where pursuant to provision made in that behalf under this Act there are separate entries in the register in respect of data kept by a data controller for different purposes, subsection (1) of this section shall apply as if it provided for the making of a separate request and the payment of a separate fee in respect of the data to which each entry relates.
(3) An individual making a request under this section shall supply the data controller concerned with such information as he may reasonably require in order to satisfy himself of the identity of the individual and to locate any relevant personal data or information.
(4) Nothing in subsection (1) of this section obliges a data controller to disclose to a data subject personal data relating to another individual unless that other individual has consented to the disclosure:
Provided that, where the circumstances are such that it would be reasonable for the data controller to conclude that, if any particulars identifying that other individual were omitted, the data could then be disclosed as aforesaid without his being thereby identified to the data subject, the data controller shall be obliged to disclose the data to the data subject with the omission of those particulars.
(5) Information supplied pursuant to a request under subsection (1) of this section may take account of any amendment of the personal data concerned made since the receipt of the request by the data controller (being an amendment that would have been made irrespective of the receipt of the request) but not of any other amendment.
(6) (a) A request by an individual under subsection (1) of this section in relation to the results of an examination at which he was a candidate shall be deemed, for the purposes of this section, to be made on—
(i) the date of the first publication of the results of the examination, or
(ii) the date of the request,
whichever is the later; and paragraph (a) of the said subsection (1) shall be construed and have effect in relation to such a request as if for “40 days” there were substituted “60 days”.
(b) In this subsection “examination” means any process for determining the knowledge, intelligence, skill or ability of a person by reference to his performance in any test, work or other activity.
(7) A notification of a refusal of a request made by an individual under and in compliance with the preceding provisions of this section shall be in writing and shall include a statement of the reasons for the refusal and an indication that the individual may complain to the Commissioner about the refusal.
(8) (a) If and whenever the Minister considers it desirable in the interests of data subjects to do so and by regulations so declares, the application of this section to personal data—
(i) relating to physical or mental health, or
(ii) kept for, or obtained in the course of, carrying out social work by a Minister of the Government, a local authority, a health board or a specified voluntary organisation or other body,
may be modified by the regulations in such manner, in such circumstances, subject to such safeguards and to such extent as may be specified therein.
(b) Regulations under paragraph (a) of this subsection shall be made only after consultation with the Minister for Health and any other Minister of the Government who, having regard to his functions, ought, in the opinion of the Minister, to be consulted and may make different provision in relation to data of different descriptions.
Restriction of right of access.
5.—(1) Section 4 of this Act does not apply to personal data—
(a) kept for the purpose of preventing, detecting or investigating offences, apprehending or prosecuting offenders or assessing or collecting any tax, duty or other moneys owed or payable to the State, a local authority or a health board, in any case in which the application of that section to the data would be likely to prejudice any of the matters aforesaid,
(b) to which, by virtue of paragraph (a) of this subsection, the said section 4 does not apply and which are kept for the purpose of discharging a function conferred by or under any enactment and consisting of information obtained for such a purpose from a person who had it in his possession for any of the purposes mentioned in paragraph (a) of this subsection,
(c) in any case in which the application of that section would be likely to prejudice the security of, or the maintenance of good order and discipline in—
(i) a prison,
(ii) a place of detention provided under section 2 of the Prison Act, 1970,
(iii) a military prison or detention barrack within the meaning of the Defence Act, 1954, or
(iv) Saint Patrick's Institution,
(d) kept for the purpose of performing such functions conferred by or under any enactment as may be specified by regulations made by the Minister, being functions that, in the opinion of the Minister, are designed to protect members of the public against financial loss occasioned by—
(i) dishonesty, incompetence or malpractice on the part of persons concerned in the provision of banking, insurance, investment or other financial services or in the management of companies or similar organisations, or
(ii) the conduct of persons who have at any time been adjudicated bankrupt,
in any case in which the application of that section to the data would be likely to prejudice the proper performance of any of those functions,
(e) in respect of which the application of that section would be contrary to the interests of protecting the international relations of the State,
(f) consisting of an estimate of, or kept for the purpose of estimating, the amount of the liability of the data controller concerned on foot of a claim for the payment of a sum of money, whether in respect of damages or compensation, in any case in which the application of the section would be likely to prejudice the interests of the data controller in relation to the claim,
(g) in respect of which a claim of privilege could be maintained in proceedings in a court in relation to communications between a client and his professional legal advisers or between those advisers,
(h) kept only for the purpose of preparing statistics or carrying out research if the data are not used or disclosed (other than to a person to whom a disclosure of such data may be made in the circumstances specified in section 8 of this Act) for any other purpose and the resulting statistics or the results of the research are not made available in a form that identifies any of the data subjects, or
(i) that are back-up data.
(2) Regulations under subsections (1) (d) and (3) (b) of this section shall be made only after consultation with any other Minister of the Government who, having regard to his functions, ought, in the opinion of the Minister, to be consulted.
(3) (a) Subject to paragraph (b) of this subsection, section 4 of this Act, as modified by any other provisions thereof, shall apply notwithstanding any provision of or made under any enactment or rule of law that is in force immediately before the passing of this Act and prohibits or restricts the disclosure, or authorises the withholding, of information.
(b) If and whenever the Minister is of opinion that a prohibition, restriction or authorisation referred to in paragraph (a) of this subsection in relation to any information ought to prevail in the interests of the data subjects concerned or any other individuals and by regulations so declares, then, while the regulations are in force, the said paragraph (a) shall not apply as respects the provision or rule of law concerned and accordingly section 4 of this Act, as modified as aforesaid, shall not apply in relation to that information.
Right of rectification or erasure.
6.—(1) An individual shall, if he so requests in writing a data controller who keeps personal data relating to him, be entitled to have rectified or, where appropriate, erased any such data in relation to which there has been a contravention by the data controller of section 2 (1) of this Act; and the data controller shall comply with the request as soon as may be and in any event not more than 40 days after it has been given or sent to him:
Provided that the data controller shall, as respects data that are inaccurate or not kept up to date, be deemed—
(a) to have complied with the request if he supplements the data with a statement (to the terms of which the individual has assented) relating to the matters dealt with by the data, and
(b) if he supplements the data as aforesaid, not to be in contravention of paragraph (b) of the said section 2 (1).
(2) On compliance by a data controller with a request under subsection (1) of this section, he shall, as soon as may be and in any event not more than 40 days after the request has been given or sent to him, notify—
(a) the individual making the request, and
(b) if such compliance materially modifies the data concerned, any person to whom the data were disclosed during the period of 12 months immediately before the giving or sending of the request,
of the rectification, erasure or statement concerned.
Duty of care owed by data controllers and data processors.
7.—For the purposes of the law of torts and to the extent that that law does not so provide, a person, being a data controller or a data processor, shall, so far as regards the collection by him of personal data or information intended for inclusion in such data or his dealing with such data, owe a duty of care to the data subject concerned:
Provided that, for the purposes only of this section, a data controller shall be deemed to have complied with the provisions of section 2 (1) (b) of this Act if and so long as the personal data concerned accurately record data or other information received or obtained by him from the data subject or a third party and include (and, if the data are disclosed, the disclosure is accompanied by)—
(a) an indication that the information constituting the data was received or obtained as aforesaid,
(b) if appropriate, an indication that the data subject has informed the data controller that he regards the information as inaccurate or not kept up to date, and
(c) any statement with which, pursuant to this Act, the data are supplemented.
Disclosure of personal data in certain cases.
8.—Any restrictions in this Act on the disclosure of personal data do not apply if the disclosure is—
(a) in the opinion of a member of the Garda Síochána not below the rank of chief superintendent or an officer of the Permanent Defence Force who holds an army rank not below that of colonel and is designated by the Minister for Defence under this paragraph, required for the purpose of safeguarding the security of the State,
(b) required for the purpose of preventing, detecting or investigating offences, apprehending or prosecuting offenders or assessing or collecting any tax, duty or other moneys owed or payable to the State, a local authority or a health board, in any case in which the application of those restrictions would be likely to prejudice any of the matters aforesaid,
(c) required in the interests of protecting the international relations of the State,
(d) required urgently to prevent injury or other damage to the health of a person or serious loss of or damage to property,
(e) required by or under any enactment or by a rule of law or order of a court,
(f) required for the purposes of obtaining legal advice or for the purposes of, or in the course of, legal proceedings in which the person making the disclosure is a party or a witness,
(g) made to the data subject concerned or to a person acting on his behalf, or
(h) made at the request or with the consent of the data subject or a person acting on his behalf.
The Data Protection Commissioner
The Commissioner.
9.—(1) For the purposes of this Act, there shall be a person (referred to in this Act as the Commissioner) who shall be known as an Coimisinéir Cosanta Sonraí or, in the English language, the Data Protection Commissioner; the Commissioner shall perform the functions conferred on him by this Act.
(2) The provisions of the Second Schedule to this Act shall have effect in relation to the Commissioner.
Enforcement of data protection.
10.—(1) (a) The Commissioner may investigate, or cause to be investigated, whether any of the provisions of this Act have been, are being or are likely to be contravened by a data controller or a data processor in relation to an individual either where the individual complains to him of a contravention of any of those provisions or he is otherwise of opinion that there may be such a contravention.
(b) Where a complaint is made to the Commissioner under paragraph (a) of this subsection, the Commissioner shall—
(i) investigate the complaint or cause it to be investigated, unless he is of opinion that it is frivolous or vexatious, and
(ii) as soon as may be, notify the individual concerned in writing of his decision in relation to the complaint and that the individual may, if aggrieved by his decision, appeal against it to the Court under section 26 of this Act within 21 days from the receipt by him of the notification.
(2) If the Commissioner is of opinion that a person, being a data controller or a data processor, has contravened or is contravening a provision of this Act (other than a provision the contravention of which is an offence), the Commissioner may, by notice in writing (referred to in this Act as an enforcement notice) served on the person, require him to take such steps as are specified in the notice within such time as may be so specified to comply with the provision concerned.
(3) Without prejudice to the generality of subsection (2) of this section, if the Commissioner is of opinion that a data controller has contravened section 2 (1) of this Act, the relevant enforcement notice may require him—
(a) to rectify or erase any of the data concerned, or
(b) to supplement the data with such statement relating to the matters dealt with by them as the Commissioner may approve of; and as respects data that are inaccurate or not kept up to date, if he supplements them as aforesaid, he shall be deemed not to be in contravention of paragraph (b) of the said section 2 (1).
(4) An enforcement notice shall—
(a) specify any provision of this Act that, in the opinion of the Commissioner, has been or is being contravened and the reasons for his having formed that opinion, and
(b) subject to subsection (6) of this section, state that the person concerned may appeal to the Court under section 26 of this Act against the requirement specified in the notice within 21 days from the service of the notice on him.
(5) Subject to subsection (6) of this section, the time specified in an enforcement notice for compliance with a requirement specified therein shall not be expressed to expire before the end of the period of 21 days specified in subsection (4) (b) of this section and, if an appeal is brought against the requirement, the requirement need not be complied with and subsection (9) of this section shall not apply in relation thereto, pending the determination or withdrawal of the appeal.
(6) If the Commissioner—
(a) by reason of special circumstances, is of opinion that a requirement specified in an enforcement notice should be complied with urgently, and
(b) includes a statement to that effect in the notice,
subsections (4) (b) and (5) of this section shall not apply in relation to the notice, but the notice shall contain a statement of the effect of the provisions of section 26 (other than subsection (3)) of this Act and shall not require compliance with the requirement before the end of the period of 7 days beginning on the date on which the notice is served.
(7) On compliance by a data controller with a requirement under subsection (3) of this section, he shall, as soon as may be and in any event not more than 40 days after such compliance, notify—
(a) the data subject concerned, and
(b) if such compliance materially modifies the data concerned, any person to whom the data were disclosed during the period beginning 12 months before the date of the service of the enforcement notice concerned and ending immediately before such compliance,
of the rectification, erasure or statement concerned.
(8) The Commissioner may cancel an enforcement notice and, if he does so, shall notify in writing the person on whom it was served accordingly.
(9) A person who, without reasonable excuse, fails or refuses to comply with a requirement specified in an enforcement notice shall be guilty of an offence.
Prohibition on transfer of personal data outside State.
11.—(1) The Commissioner may, subject to the provisions of this section, prohibit the transfer of personal data from the State to a place outside the State.
(2) The Commissioner, when considering whether to prohibit a proposed transfer of personal data from the State to a place in a state bound by the Convention, shall have regard to the provisions of Article 12 of the Convention.
(3) The Commissioner shall not prohibit a proposed transfer of personal data from the State to a place outside the State unless he is of opinion that the transfer would, if the place were in a state bound by the Convention, be likely to lead to a contravention of the basic principles for data protection set out in Chapter II of the Convention.
(4) In determining whether to prohibit a transfer of personal data under this section, the Commissioner shall also consider whether the transfer would be likely to cause damage or distress to any person and have regard to the desirability of facilitating international transfers of data.
(5) A prohibition under subsection (1) of this section shall be effected by the service of a notice (referred to in this Act as a prohibition notice) on the person proposing to transfer the data concerned.
(6) A prohibition notice shall—
(a) prohibit the transfer concerned either absolutely or until the person aforesaid has taken such steps as are specified in the notice for protecting the interests of the data subjects concerned,
(b) specify the time when it is to take effect,
(c) specify the grounds for the prohibition, and
(d) subject to subsection (8) of this section, state that the person concerned may appeal to the Court under section 26 of this Act against the prohibition specified in the notice within 21 days from the service of the notice on him.
(7) Subject to subsection (8) of this section, the time specified in a prohibition notice for compliance with the prohibition specified therein shall not be expressed to expire before the end of the period of 21 days specified in subsection (6) (d) of this section and, if an appeal is brought against the prohibition, the prohibition need not be complied with and subsection (13) of this section shall not apply in relation thereto, pending the determination or withdrawal of the appeal.
(8) If the Commissioner—
(a) by reason of special circumstances, is of opinion that a prohibition specified in a prohibition notice should be complied with urgently, and
(b) includes a statement to that effect in the notice,
subsections (6) (d) and (7) of this section shall not apply in relation to the notice but the notice shall contain a statement of the effect of the provisions of section 26 (other than subsection (3)) of this Act and shall not require compliance with the prohibition before the end of the period of 7 days beginning on the date on which the notice is served.
(9) The Commissioner may cancel a prohibition notice and, if he does so, shall notify in writing the person on whom it was served accordingly.
(10) This section shall not apply to a transfer of data if the transfer of the data or the information constituting the data is required or authorised by or under any enactment or required by any convention or other instrument imposing an international obligation on the State.
(11) For the purposes of this section, a place shall be deemed to be in a state bound by the Convention if it is in any territory in respect of which the state is so bound.
(12) (a) This section applies, with any necessary modifications, to a transfer of information from the State to a place outside the State for conversion into personal data as it applies to a transfer of personal data from the State to such a place.
(b) In paragraph (a) of this subsection “information” means information (not being data) relating to a living individual who can be identified from it.
(13) A person who, without reasonable excuse, fails or refuses to comply with a prohibition specified in a prohibition notice shall be guilty of an offence.
Power to require information.
12.—(1) The Commissioner may, by notice in writing (referred to in this Act as an information notice) served on a person, require the person to furnish to him in writing within such time as may be specified in the notice such information in relation to matters specified in the notice as is necessary or expedient for the performance by the Commissioner of his functions.
(2) Subject to subsection (3) of this section—
(a) an information notice shall state that the person concerned may appeal to the Court under section 26 of this Act against the requirement specified in the notice within 21 days from the service of the notice on him, and
(b) the time specified in the notice for compliance with a requirement specified therein shall not be expressed to expire before the end of the period of 21 days specified in paragraph (a) of this subsection and, if an appeal is brought against the requirement, the requirement need not be complied with and subsection (5) of this section shall not apply in relation thereto, pending the determination or withdrawal of the appeal.
(3) If the Commissioner—
(a) by reason of special circumstances, is of opinion that a requirement specified in an information notice should be complied with urgently, and
(b) includes a statement to that effect in the notice,
subsection (2) of this section shall not apply in relation to the notice, but the notice shall contain a statement of the effect of the provisions of section 26 (other than subsection (3)) of this Act and shall not require compliance with the requirement before the end of the period of 7 days beginning on the date on which the notice is served.
(4) (a) No enactment or rule of law prohibiting or restricting the disclosure of information shall preclude a person from furnishing to the Commissioner any information that is necessary or expedient for the performance by the Commissioner of his functions.
(b) Paragraph (a) of this subsection does not apply to information that in the opinion of the Minister or the Minister for Defence is, or at any time was, kept for the purpose of safeguarding the security of the State or information that is privileged from disclosure in proceedings in any court.
(5) A person who, without reasonable excuse, fails or refuses to comply with a requirement specified in an information notice or who in purported compliance with such a requirement furnishes information to the Commissioner that the person knows to be false or misleading in a material respect shall be guilty of an offence.
Codes of practice.
13.—(1) The Commissioner shall encourage trade associations and other bodies representing categories of data controllers to prepare codes of practice to be complied with by those categories in dealing with personal data.
(2) The Commissioner may approve of any code of practice so prepared (referred to subsequently in this section as a code) if he is of opinion that it provides for the data subjects concerned a measure of protection with regard to personal data relating to them that conforms with that provided for by sections 2, 3, 4 (other than subsection (8)) and 6 of this Act and shall encourage its dissemination to the data controllers concerned.
(3) Any such code that is so approved of may be laid by the Minister before each House of the Oireachtas and, if each such House passes a resolution approving of it, then—
(a) in so far as it relates to dealing with personal data by the categories of data controllers concerned—
(i) it shall have the force of law in accordance with its terms, and
(ii) upon its commencement, references (whether specific or general) in this Act to any of the provisions of the said sections shall be construed (or, if the code is in substitution for a code having the force of law by virtue of this subsection, continue to be construed) as if they were also references to the relevant provisions of the code for the time being having the force of law,
and
(b) it shall be deemed to be a statutory instrument to which the Statutory Instruments Act, 1947, primarily applies.
(4) This section shall apply in relation to data processors as it applies in relation to categories of data controllers with the modification that the references in this section to the said sections shall be construed as references to section 2 (1) (d) of this Act and with any other necessary modifications.
Annual report.
14.—(1) The Commissioner shall in each year after the year in which the first Commissioner is appointed prepare a report in relation to his activities under this Act in the preceding year and cause copies of the report to be laid before each House of the Oireachtas.
(2) Notwithstanding subsection (1) of this section, if, but for this subsection, the first report under that subsection would relate to a period of less than 6 months, the report shall relate to that period and to the year immediately following that period and shall be prepared as soon as may be after the end of that year.
Mutual assistance between parties to Convention.
15.—(1) The Commissioner is hereby designated for the purposes of Chapter IV (which relates to mutual assistance) of the Convention.
(2) The Minister may make any regulations that he considers necessary or expedient for the purpose of enabling the said Chapter IV to have full effect.
Registration
The register.
16.—(1) This section applies to the following persons, that is to say:
(a) data controllers, being public authorities and other bodies and persons referred to in the Third Schedule to this Act,
(b) data controllers, being financial institutions, persons holding authorisations under the European Communities (Non-Life) Insurance Regulations, 1976 (S.I. No. 115 of 1976), or the European Communities (Life Assurance) Regulations, 1984 (S.I. No. 57 of 1984), or persons whose business consists wholly or mainly in direct marketing, providing credit references or collecting debts,
(c) any other data controllers who keep personal data relating to—
(i) racial origin,
(ii) political opinions or religious or other beliefs,
(iii) physical or mental health (other than any such data reasonably kept by them in relation to the physical or mental health of their employees in the ordinary course of personnel administration and not used or disclosed for any other purpose),
(iv) sexual life, or
(v) criminal convictions,
(d) data processors whose business consists wholly or partly in processing personal data on behalf of data controllers, and
(e) such categories of data controllers and data processors as may stand prescribed for the time being (which categories may include data controllers and data processors to whom this section would not otherwise apply and on whom enforcement notices, prohibition notices or information notices have been served if the notices are in force and either the time for bringing an appeal against them under section 26 of this Act has expired without such an appeal having been brought or any such appeal has been withdrawn).
(2) The Commissioner shall establish and maintain a register (referred to in this Act as the register) of persons to whom this section applies and shall make, as appropriate, an entry or entries in the register in respect of each person whose application for registration therein is accepted by the Commissioner.
(3) (a) Members of the public may inspect the register free of charge at all reasonable times and may take copies of, or of extracts from, entries in the register.
(b) A member of the public may, on payment to the Commissioner of such fee (if any) as may be prescribed, obtain from the Commissioner a copy (certified by him or by a member of his staff to be a true copy) of, or of an extract from, any entry in the register.
(c) In any proceedings—
(i) a copy of, or of an extract from, an entry in the register certified by the Commissioner or by a member of his staff to be a true copy shall be evidence of the entry or extract, and
(ii) a document purporting to be such a copy, and to be certified, as aforesaid shall be deemed to be such a copy and to be so certified unless the contrary is proved.
(d) In any proceedings—
(i) a certificate signed by the Commissioner or by a member of his staff and stating that there is not an entry in the register in respect of a specified person as a data controller or as a data processor shall be evidence of that fact, and
(ii) a document purporting to be such a certificate, and to be signed, as aforesaid shall be deemed to be such a certificate and to be so signed unless the contrary is proved.
Applications for registration.
17.—(1) (a) A person wishing to be registered in the register or to have a registration continued under section 18 of this Act or to have the particulars in an entry in the register altered shall make an application in writing in that behalf to the Commissioner and shall furnish to him such information as may be prescribed and any other information that he may require.
(b) Where a data controller intends to keep personal data for two or more purposes, he may make an application for separate registration in respect of any of those purposes and, subject to the provisions of this Act, entries shall be made in the register in accordance with any such applications.
(2) Subject to subsection (3) of this section, the Commissioner shall accept an application for registration, made in the prescribed manner and in respect of which such fee as may be prescribed has been paid, from a person to whom section 16 of this Act applies unless he is of opinion that—
(a) the particulars proposed for inclusion in an entry in the register are insufficient or any other information required by the Commissioner either has not been furnished or is insufficient, or
(b) the person applying for registration is likely to contravene any of the provisions of this Act.
(3) The Commissioner shall not accept such an application for registration as aforesaid from a data controller who keeps personal data specified in section 16 (1) (c) of this Act unless he is of opinion that appropriate safeguards for the protection of the privacy of the data subjects concerned are being, and will continue to be, provided by him.
(4) Where the Commissioner refuses an application for registration, he shall, as soon as may be, notify in writing the person applying for registration of the refusal and the notification shall—
(a) specify the reasons for the refusal, and
(b) state that the person may appeal to the Court under section 26 of this Act against the refusal within 21 days from the receipt by him of the notification.
(5) If—
(a) the Commissioner, by reason of special circumstances, is of opinion that a refusal of an application for registration should take effect urgently, and
(b) the notification of the refusal includes a statement to that effect and a statement of the effect of the provisions of section 26 (other than subsection (3)) of this Act,
paragraph (b) of subsection (4) of this section shall not apply in relation to the notification and paragraph (b) of subsection (6) of this section shall be construed and have effect as if for the words from and including “21 days” to the end of the paragraph there were substituted “7 days beginning on the date on which the notification was received,”.
(6) Subject to subsection (5) of this section, a person who has made an application for registration shall—
(a) until he is notified that it has been accepted or it is withdrawn, or
(b) if he is notified that the application has been refused, until the end of the period of 21 days within which an appeal may be brought under section 26 of this Act against the refusal and, if such an appeal is brought, until the determination or withdrawal of the appeal,
be treated for the purposes of section 19 of this Act as if the application had been accepted and the particulars contained in it had been included in an entry in the register on the date on which the application was made.
(7) Subsections (2) to (6) of this section apply, with any necessary modifications, to an application for continuance of registration and an application for alteration of the particulars in an entry in the register as they apply to an application for registration.
Duration and continuance of registration.
18.—(1) A registration (whether it is the first registration or a registration continued under this section) shall be for the prescribed period and on the expiry thereof the relevant entry shall be removed from the register unless the registration is continued as aforesaid.
(2) The prescribed period (which shall not be less than one year) shall be calculated—
(a) in the case of a first registration, from the date on which the relevant entry was made in the register, and
(b) in the case of a registration which has been continued under this section, from the date from which it was so continued.
(3) The Commissioner shall, subject to the provisions of this Act, continue a registration, whether it has previously been continued under this section or not.
(4) Notwithstanding the foregoing provisions of this section, the Commissioner may at any time, at the request of the person to whom an entry relates, remove it from the register.
Effect of registration.
19.—(1) A data controller to whom section 16 of this Act applies shall not keep personal data unless there is for the time being an entry in the register in respect of him.
(2) A data controller in respect of whom there is an entry in the register shall not—
(a) keep personal data of any description other than that specified in the entry,
(b) keep or use personal data for a purpose other than the purpose or purposes described in the entry,
(c) if the source from which such data, and any information intended for inclusion in such data, are obtained is required to be described in the entry, obtain such data or information from a source that is not so described,
(d) disclose such data to a person who is not described in the entry (other than a person to whom a disclosure of such data may be made in the circumstances specified in section 8 of this Act),
(e) directly or indirectly transfer such data to a place outside the State other than one named or described in the entry.
(3) An employee or agent (not being a data processor) of a data controller mentioned in subsection (2) of this section shall, as respects personal data kept or, as the case may be, to be kept by the data controller, be subject to the same restrictions in relation to the use, source, disclosure or transfer of the data as those to which the data controller is subject under that subsection.
(4) A data processor to whom section 16 applies shall not process personal data unless there is for the time being an entry in the register in respect of him.
(5) If and whenever a person in respect of whom there is an entry in the register changes his address, he shall thereupon notify the Commissioner of the change.
(6) A person who contravenes subsection (1), (4) or (5), or knowingly contravenes any other provision, of this section shall be guilty of an offence.
Regulations for registration.
20.—(1) The following matters, and such other matters (if any) as may be necessary or expedient for the purpose of enabling sections 16 to 19 of this Act to have full effect, may be prescribed:
(a) the procedure to be followed in relation to applications by persons for registration, continuance of registration or alteration of the particulars in an entry in the register or for withdrawal of such applications,
(b) the information required to be furnished to the Commissioner by such persons, and
(c) the particulars to be included in entries in the register,
and different provision may be made in relation to the matters aforesaid as respects different categories of persons.
(2) A person who in purported compliance with a requirement prescribed under this section furnishes information to the Commissioner that the person knows to be false or misleading in a material respect shall be guilty of an offence.
Miscellaneous
Unauthorised disclosure by data processor.
21.—(1) Personal data processed by a data processor shall not be disclosed by him, or by an employee or agent of his, without the prior authority of the data controller on behalf of whom the data are processed.
(2) A person who knowingly contravenes subsection (1) of this section shall be guilty of an offence.
Disclosure of personal data obtained without authority.
22.—(1) A person who—
(a) obtains access to personal data, or obtains any information constituting such data, without the prior authority of the data controller or data processor by whom the data are kept, and
(b) discloses the data or information to another person,
shall be guilty of an offence.
(2) Subsection (1) of this section does not apply to a person who is an employee or agent of the data controller or data processor concerned.
Provisions in relation to certain non-residents and to data kept or processed outside State.
23.—(1) Subject to the provisions of this section, this Act does not apply to a data controller in respect of data kept, or to a data processor in respect of data processed, outside the State.
(2) For the purposes of this section, data shall be deemed to be—
(a) kept by a data controller in the place where he controls their contents and use, and
(b) processed by a data processor in the place where the relevant data equipment is located.
(3) Where a person who is not resident in the State controls the contents and use of personal data kept within the State, or processes any such data, through an employee or agent in the State, this Act shall apply as if that control was exercised or, as the case may be, the data were processed by the employee or agent acting on his own account.
(4) This Act does not apply to data processed wholly outside the State unless the data are used or intended to be used in the State.
(5) Section 19 (2) (e) of this Act does not apply to the transfer of data that are already outside the State.
Powers of authorised officers.
24.—(1) In this section “authorised officer” means a person authorised in writing by the Commissioner to exercise, for the purposes of this Act, the powers conferred by this section.
(2) An authorised officer may, for the purpose of obtaining any information that is necessary or expedient for the performance by the Commissioner of his functions, on production of the officer's authorisation, if so required—
(a) at all reasonable times enter premises that he reasonably believes to be occupied by a data controller or a data processor, inspect the premises and any data therein (other than data consisting of information specified in section 12 (4) (b) of this Act) and inspect, examine, operate and test any data equipment therein,
(b) require any person on the premises, being a data controller, a data processor or an employee of either of them, to disclose to the officer any such data and produce to him any data material (other than data material consisting of information so specified) that is in that person's power or control and to give to him such information as he may reasonably require in regard to such data and material,
(c) either on the premises or elsewhere, inspect and copy or extract information from such data, or inspect and copy or take extracts from such material, and
(d) require any person mentioned in paragraph (b) of this subsection to give to the officer such information as he may reasonably require in regard to the procedures employed for complying with the provisions of this Act, the sources from which such data are obtained, the purposes for which they are kept, the persons to whom they are disclosed and the data equipment in the premises.
(3) Subject to subsection (5) of this section, subsection (2) of this section shall not apply in relation to a financial institution.
(4) Whenever the Commissioner considers it necessary or expedient for the performance by him of his functions that an authorised officer should exercise, in relation to a financial institution, the powers conferred by subsection (2) of this section, the Commissioner may apply to the High Court for an order under this section.
(5) Whenever, on an application to it under subsection (4) of this section, the High Court is satisfied that it is reasonable to do so and is satisfied that the exigencies of the common good so warrant, it may make an order authorising an authorised officer to exercise the powers conferred by subsection (2) of this section in relation to the financial institution concerned, subject to such conditions (if any) as it thinks proper and specifies in the order.
(6) A person who obstructs or impedes an authorised officer in the exercise of a power, or, without reasonable excuse, does not comply with a requirement, under this section or who in purported compliance with such a requirement gives information to an authorised officer that he knows to be false or misleading in a material respect shall be guilty of an offence.
Service of notices.
25.—Any notice authorised by this Act to be served on a person by the Commissioner may be served—
(a) if the person is an individual—
(i) by delivering it to him or
(ii) by sending it to him by post addressed to him at his usual or last-known place of residence or business, or
(iii) by leaving it for him at that place,
(b) if the person is a body corporate or an unincorporated body of persons, by sending it to the body by post to, or addressing it to and leaving it at, in the case of a company, its registered office (within the meaning of the Companies Act, 1963) and, in any other case, its principal place of business.
Appeals to Circuit Court.
26.—(1) An appeal may be made to and heard and determined by the Court against—
(a) a requirement specified in an enforcement notice or an information notice,
(b) a prohibition specified in a prohibition notice,
(c) a refusal by the Commissioner under section 17 of this Act, notified by him under that section, and
(d) a decision of the Commissioner in relation to a complaint under section 10 (1) (a) of this Act,
and such an appeal shall be brought within 21 days from the service on the person concerned of the relevant notice or, as the case may be, the receipt by such person of the notification of the relevant refusal or decision.
(2) The jurisdiction conferred on the Court by this Act shall be exercised by the judge for the time being assigned to the circuit where the appellant ordinarily resides or carries on any profession, business or occupation or, at the option of the appellant, by a judge of the Court for the time being assigned to the Dublin circuit.
(3) (a) Subject to paragraph (b) of this subsection, a decision of the Court under this section shall be final.
(b) An appeal may be brought to the High Court on a point of law against such a decision; and references in this Act to the determination of an appeal shall be construed as including references to the determination of any such appeal to the High Court and of any appeal from the decision of that Court.
(4) Where—
(a) a person appeals to the Court pursuant to paragraph (a), (b) or (c) of subsection (1) of this section,
(b) the appeal is brought within the period specified in the notice or notification mentioned in paragraph (c) of this subsection, and
(c) the Commissioner has included a statement in the relevant notice or notification to the effect that by reason of special circumstances he is of opinion that the requirement or prohibition specified in the notice should be complied with, or the refusal specified in the notification should take effect, urgently,
then, notwithstanding any provision of this Act, if the Court, on application to it in that behalf, so determines, non-compliance by the person with a requirement or prohibition specified in the notice, or, as the case may be, a contravention by him of section 19 of this Act, during the period ending with the determination or withdrawal of the appeal or during such other period as may be determined as aforesaid shall not constitute an offence.
Evidence in proceedings.
27.—(1) In any proceedings—
(a) a certificate signed by the Minister or the Minister for Defence and stating that in his opinion personal data are, or at any time were, kept for the purpose of safeguarding the security of the State shall be evidence of that opinion,
(b) a certificate—
(i) signed by a member of the Garda Síochána not below the rank of chief superintendent or an officer of the Permanent Defence Force who holds an army rank not below that of colonel and is designated by the Minister for Defence under section 8 (a) of this Act, and
(ii) stating that in the opinion of the member or, as the case may be, the officer a disclosure of personal data is required for the purpose aforesaid,
shall be evidence of that opinion, and
(c) a document purporting to be a certificate under paragraph (a) or (b) of this subsection and to be signed by a person specified in the said paragraph (a) or (b), as appropriate, shall be deemed to be such a certificate and to be so signed unless the contrary is proved.
(2) Information supplied by a person in compliance with a request under section 3 or 4 (1) of this Act, a requirement under this Act or a direction of a court in proceedings under this Act shall not be admissible in evidence against him or his spouse in proceedings for an offence under this Act.
Hearing of proceedings.
28.—The whole or any part of any proceedings under this Act may, at the discretion of the court, be heard otherwise than in public.
Offences by directors, etc., of bodies corporate.
29.—(1) Where an offence under this Act has been committed by a body corporate and is proved to have been committed with the consent or connivance of or to be attributable to any neglect on the part of a person, being a director, manager, secretary or other officer of that body corporate, or a person who was purporting to act in any such capacity, that person, as well as the body corporate, shall be guilty of that offence and be liable to be proceeded against and punished accordingly.
(2) Where the affairs of a body corporate are managed by its members, subsection (1) of this section shall apply in relation to the acts and defaults of a member in connection with his functions of management as if he were a director or manager of the body corporate.
Prosecution of summary offences by Commissioner.
30.—(1) Summary proceedings for an offence under this Act may be brought and prosecuted by the Commissioner.
(2) Notwithstanding section 10 (4) of the Petty Sessions (Ireland) Act, 1851, summary proceedings for an offence under this Act may be instituted within one year from the date of the offence.
Penalties.
31.—(1) A person guilty of an offence under this Act shall be liable—
(a) on summary conviction, to a fine not exceeding £1,000, or
(b) on conviction on indictment, to a fine not exceeding £50,000.
(2) Where a person is convicted of an offence under this Act, the court may order any data material which appears to the court to be connected with the commission of the offence to be forfeited or destroyed and any relevant data to be erased.
(3) The court shall not make an order under subsection (2) of this section in relation to data material or data where it considers that some person other than the person convicted of the offence concerned may be the owner of, or otherwise interested in, the data unless such steps as are reasonably practicable have been taken for notifying that person and giving him an opportunity to show cause why the order should not be made.
(4) Section 13 of the Criminal Procedure Act, 1967, shall apply in relation to an offence under this Act that is not being prosecuted summarily as if, in lieu of the penalties provided for in subsection (3) (a) of that section, there were specified therein the fine provided for in subsection (1) (a) of this section and the reference in subsection (2) (a) of the said section 13 to the penalties provided for by subsection (3) shall be construed and have effect accordingly.
Laying of regulations before Houses of Oireachtas.
32.—Every regulation made under this Act (other than section 2) shall be laid before each House of the Oireachtas as soon as may be after it is made and, if a resolution annulling the regulation is passed by either such House within the next 21 days on which that House has sat after the regulation is laid before it, the regulation shall be annulled accordingly, but without prejudice to the validity of anything previously done thereunder.
Fees.
33.—(1) Fees under this Act shall be paid into or disposed of for the benefit of the Exchequer in accordance with the directions of the Minister for Finance.
(2) The Public Offices Fees Act, 1879, shall not apply in respect of any fees under this Act.
Expenses of Minister.
34.—The expenses incurred by the Minister in the administration of this Act shall, to such extent as may be sanctioned by the Minister for Finance, be paid out of moneys provided by the Oireachtas.
Short title and commencement.
35.—(1) This Act may be cited as the Data Protection Act, 1988.
(2) This Act shall come into operation on such day or days as, by order or orders made by the Minister under this section, may be fixed therefor either generally or with reference to any particular purpose or provision and different days may be so fixed for different purposes and different provisions.
FIRST SCHEDULE
Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data done at Strasbourg on the 28th day of January, 1981
PREAMBLE
The member States of the Council of Europe, signatory hereto,
Considering that the aim of the Council of Europe is to achieve greater unity between its members, based in particular on respect for the rule of law, as well as human rights and fundamental freedoms;
Considering that it is desirable to extend the safeguards for everyone's rights and fundamental freedoms, and in particular the right to the respect for privacy, taking account of the increasing flow across frontiers of personal data undergoing automatic processing;
Reaffirming at the same time their commitment to freedom of information regardless of frontiers;
Recognising that it is necessary to reconcile the fundamental values of the respect for privacy and the free flow of information between peoples,
Have agreed as follows:
CHAPTER I—GENERAL PROVISIONS
Article 1
Object and purpose
The purpose of this convention is to secure in the territory of each Party for every individual, whatever his nationality or residence, respect for his rights and fundamental freedoms, and in particular his right to privacy, with regard to automatic processing of personal data relating to him (“data protection”).
Article 2
Definitions
For the purposes of this convention:
a. “personal data” means any information relating to an identified or identifiable individual (“data subject”);
b. “automated data file” means any set of data undergoing automatic processing;
c. “automatic processing” includes the following operations if carried out in whole or in part by automated means: storage of data, carrying out of logical and/or arithmetical operations on those data, their alteration, erasure, retrieval or dissemination;
d. “controller of the file” means the natural or legal person, public authority, agency or any other body who is competent according to the national law to decide what should be the purpose of the automated data file, which categories of personal data should be stored and which operations should be applied to them.
Article 3
Scope
1. The Parties undertake to apply this convention to automated personal data files and automatic processing of personal data in the public and private sectors.
2. Any State may, at the time of signature or when depositing its instrument of ratification, acceptance, approval or accession, or at any later time, give notice by a declaration addressed to the Secretary General of the Council of Europe:
a. that it will not apply this convention to certain categories of automated personal data files, a list of which will be deposited. In this list it shall not include, however, categories of automated data files subject under its domestic law to data protection provisions. Consequently, it shall amend this list by a new declaration whenever additional categories of automated personal data files are subjected to data protection provisions under its domestic law;
b. that it will also apply this convention to information relating to groups of persons, associations, foundations, companies, corporations and any other bodies consisting directly or indirectly of individuals, whether or not such bodies possess legal personality;
c. that it will also apply this convention to personal data files which are not processed automatically.
3. Any State which has extended the scope of this convention by any of the declarations provided for in sub-paragraph 2.b or c above may give notice in the said declaration that such extensions shall apply only to certain categories of personal data files, a list of which will be deposited.
4. Any Party which has excluded certain categories of automated personal data files by a declaration provided for in sub-paragraph 2.a above may not claim the application of this convention to such categories by a Party which has not excluded them.
5. Likewise, a Party which has not made one or other of the extensions provided for in sub-paragraphs 2.b or c above may not claim the application of this convention on these points with respect to a Party which has made such extensions.
6. The declarations provided for in paragraph 2 above shall take effect from the moment of the entry into force of the convention with regard to the State which has made them if they have been made at the time of signature or deposit of its instrument of ratification, acceptance, approval or accession, or three months after their receipt by the Secretary General of the Council of Europe if they have been made at any later time. These declarations may be withdrawn, in whole or in part, by a notification addressed to the Secretary General of the Council of Europe. Such withdrawals shall take effect three months after the date of receipt of such notification.
CHAPTER II—BASIC PRINCIPLES FOR DATA PROTECTION
Article 4
Duties of the Parties
1. Each Party shall take the necessary measures in its domestic law to give effect to the basic principles for data protection set out in this chapter.
2. These measures shall be taken at the latest at the time of entry into force of this convention in respect of that Party.
Article 5
Quality of data
Personal data undergoing automatic processing shall be:
a. obtained and processed fairly and lawfully;
b. stored for specified and legitimate purposes and not used in a way incompatible with those purposes;
c. adequate, relevant and not excessive in relation to the purposes for which they are stored;
d. accurate and, where necessary, kept up to date;
e. preserved in a form which permits identification of the data subjects for no longer than is required for the purpose for which those data are stored.
Article 6
Special categories of data
Personal data revealing racial origin, political opinions or religious or other beliefs, as well as personal data concerning health or sexual life, may not be processed automatically unless domestic law provides appropriate safeguards. The same shall apply to personal data relating to criminal convictions.
Article 7
Data security
Appropriate security measures shall be taken for the protection of personal data stored in automated data files against accidental or unauthorised destruction or accidental loss as well as against unauthorised access, alteration or dissemination.
Article 8
Additional safeguards for the data subject
Any person shall be enabled:
a. to establish the existence of an automated personal data file, its main purposes, as well as the identity and habitual residence or principal place of business of the controller of the file;
b. to obtain at reasonable intervals and without excessive delay or expense confirmation of whether personal data relating to him are stored in the automated data file as well as communication to him of such data in an intelligible form;
c. to obtain, as the case may be, rectification or erasure of such data if these have been processed contrary to the provisions of domestic law giving effect to the basic principles set out in Articles 5 and 6 of this convention;
d. to have a remedy if a request for confirmation or, as the case may be, communication, rectification or erasure as referred to in paragraphs b and c of this article is not complied with.
Article 9
Exceptions and restrictions
1. No exception to the provisions of Articles 5, 6 and 8 of this convention shall be allowed except within the limits defined in this article.
2. Derogation from the provisions of Articles 5, 6 and 8 of this convention shall be allowed when such derogation is provided for by the law of the Party and constitutes a necessary measure in a democratic society in the interests of:
a. protecting State security, public safety, the monetary interests of the State or the suppression of criminal offences;
b. protecting the data subject or the rights and freedoms of others.
3. Restrictions on the exercise of the rights specified in Article 8, paragraphs b, c and d, may be provided by law with respect to automated personal data files used for statistics or for scientific research purposes when there is obviously no risk of an infringement of the privacy of the data subjects.
Article 10
Sanctions and remedies
Each Party undertakes to establish appropriate sanctions and remedies for violations of provisions of domestic law giving effect to the basic principles for data protection set out in this chapter.
Article 11
Extended protection
None of the provisions of this chapter shall be interpreted as limiting or otherwise affecting the possibility for a Party to grant data subjects a wider measure of protection than that stipulated in this convention.
CHAPTER III—TRANSBORDER DATA FLOWS
Article 12
Transborder flows of personal data and domestic law
1. The following provisions shall apply to the transfer across national borders, by whatever medium, of personal data undergoing automatic processing or collected with a view to their being automatically processed.
2. A Party shall not, for the sole purpose of the protection of privacy, prohibit or subject to special authorisation transborder flows of personal data going to the territory of another Party.
3. Nevertheless, each Party shall be entitled to derogate from the provisions of paragraph 2:
a. insofar as its legislation includes specific regulations for certain categories of personal data or of automated personal data files, because of the nature of those data or those files, except where the regulations of the other Party provide an equivalent protection;
b. when the transfer is made from its territory to the territory of a non-Contracting State through the intermediary of the territory of another Party, in order to avoid such transfers resulting in circumvention of the legislation of the Party referred to at the beginning of this paragraph.
CHAPTER IV—MUTUAL ASSISTANCE
Article 13
Co-operation between Parties
1. The Parties agree to render each other mutual assistance in order to implement this convention.
2. For that purpose:
a. each Party shall designate one or more authorities, the name and address of each of which it shall communicate to the Secretary General of the Council of Europe;
b. each Party which has designated more than one authority shall specify in its communication referred to in the previous sub-paragraph the competence of each authority.
3. An authority designated by a Party shall at the request of an authority designated by another Party:
a. furnish information on its law and administrative practice in the field of data protection;
b. take, in conformity with its domestic law and for the sole purpose of protection of privacy, all appropriate measures for furnishing factual information relating to specific automatic processing carried out in its territory, with the exception however of the personal data being processed.
Article 14
Assistance to data subjects resident abroad
1. Each Party shall assist any person resident abroad to exercise the rights conferred by its domestic law giving effect to the principles set out in Article 8 of this convention.
2. When such a person resides in the territory of another Party he shall be given the option of submitting his request through the intermediary of the authority designated by that Party.
3. The request for assistance shall contain all the necessary particulars, relating inter alia to:
a. the name, address and any other relevant particulars identifying the person making the request;
b. the automated personal data file to which the request pertains, or its controller;
c. the purpose of the request.
Article 15
Safeguards concerning assistance rendered by designated authorities
1. An authority designated by a Party which has received information from an authority designated by another Party either accompanying a request for assistance or in reply to its own request for assistance shall not use that information for purposes other than those specified in the request for assistance.
2. Each Party shall see to it that the persons belonging to or acting on behalf of the designated authority shall be bound by appropriate obligations of secrecy or confidentiality with regard to that information.
3. In no case may a designated authority be allowed to make under Article 14, paragraph 2, a request for assistance on behalf of a data subject resident abroad, of its own accord and without the express consent of the person concerned.
Article 16
Refusal of requests for assistance
A designated authority to which a request for assistance is addressed under Articles 13 or 14 of this convention may not refuse to comply with it unless:
a. the request is not compatible with the powers in the field of data protection of the authorities responsible for replying;
b. the request does not comply with the provisions of this convention;
c. compliance with the request would be incompatible with the sovereignty, security or public policy (ordre public) of the Party by which it was designated, or with the rights and fundamental freedoms of persons under the jurisdiction of that Party.
Article 17
Costs and procedures of assistance
1. Mutual assistance which the Parties render each other under Article 13 and assistance they render to data subjects abroad under Article 14 shall not give rise to the payment of any costs or fees other than those incurred for experts and interpreters. The latter costs or fees shall be borne by the Party which has designated the authority making the request for assistance.
2. The data subject may not be charged costs or fees in connection with the steps taken on his behalf in the territory of another Party other than those lawfully payable by residents of that Party.
3. Other details concerning the assistance relating in particular to the forms and procedures and the languages to be used, shall be established directly between the Parties concerned.
CHAPTER V—CONSULTATIVE COMMITTEE
Article 18
Composition of the committee
1. A Consultative Committee shall be set up after the entry into force of this convention.
2. Each Party shall appoint a representative to the committee and a deputy representative. Any member State of the Council of Europe which is not a Party to the convention shall have the right to be represented on the committee by an observer.
3. The Consultative Committee may, by unanimous decision, invite any non-member State of the Council of Europe which is not a Party to the convention to be represented by an observer at a given meeting.
Article 19
Functions of the committee
The Consultative Committee:
a. may make proposals with a view to facilitating or improving the application of the convention;
b. may make proposals for amendment of this convention in accordance with Article 21;
c. shall formulate its opinion on any proposal for amendment of this convention which is referred to it in accordance with Article 21, paragraph 3;
d. may, at the request of a Party, express an opinion on any question concerning the application of this convention.
Article 20
Procedure
1. The Consultative Committee shall be convened by the Secretary General of the Council of Europe. Its first meeting shall be held within twelve months of the entry into force of this convention. It shall subsequently meet at least once every two years and in any case when one-third of the representatives of the Parties request its convocation.
2. A majority of representatives of the Parties shall constitute a quorum for a meeting of the Consultative Committee.
3. After each of its meetings, the Consultative Committee shall submit to the Committee of Ministers of the Council of Europe a report on its work and on the functioning of the convention.
4. Subject to the provisions of this convention, the Consultative Committee shall draw up its own Rules of Procedure.
CHAPTER VI—AMENDMENTS
Article 21
Amendments
1. Amendments to this convention may be proposed by a Party, the Committee of Ministers of the Council of Europe or the Consultative Committee.
2. Any proposal for amendment shall be communicated by the Secretary General of the Council of Europe to the member States of the Council of Europe and to every non-member State which has acceded to or has been invited to accede to this convention in accordance with the provisions of Article 23.
3. Moreover, any amendment proposed by a Party or the Committee of Ministers shall be communicated to the Consultative Committee, which shall submit to the Committee of Ministers its opinion on that proposed amendment.
4. The Committee of Ministers shall consider the proposed amendment and any opinion submitted by the Consultative Committee and may approve the amendment.
5. The text of any amendment approved by the Committee of Ministers in accordance with paragraph 4 of this article shall be forwarded to the Parties for acceptance.
6. Any amendment approved in accordance with paragraph 4 of this article shall come into force on the thirtieth day after all Parties have informed the Secretary General of their acceptance thereof.
CHAPTER VII—FINAL CLAUSES
Article 22
Entry into force
1. This convention shall be open for signature by the member States of the Council of Europe. It is subject to ratification, acceptance or approval. Instruments of ratification, acceptance or approval shall be deposited with the Secretary General of the Council of Europe.
2. This convention shall enter into force on the first day of the month following the expiration of a period of three months after the date on which five member States of the Council of Europe have expressed their consent to be bound by the convention in accordance with the provisions of the preceding paragraph.
3. In respect of any member State which subsequently expresses its consent to be bound by it, the convention shall enter into force on the first day of the month following the expiration of a period of three months after the date of the deposit of the instrument of ratification, acceptance or approval.
Article 23
Accession by non-member States
1. After the entry into force of this convention, the Committee of Ministers of the Council of Europe may invite any State not a member of the Council of Europe to accede to this convention by a decision taken by the majority provided for in Article 20.d of the Statute of the Council of Europe and by the unanimous vote of the representatives of the Contracting States entitled to sit on the committee.
2. In respect of any acceding State, the convention shall enter into force on the first day of the month following the expiration of a period of three months after the date of deposit of the instrument of accession with the Secretary General of the Council of Europe.
Article 24
Territorial clause
1. Any State may at the time of signature or when depositing its instrument of ratification, acceptance, approval or accession, specify the territory or territories to which this convention shall apply.
2. Any State may at any later date, by a declaration addressed to the Secretary General of the Council of Europe, extend the application of this convention to any other territory specified in the declaration. In respect of such territory the convention shall enter into force on the first day of the month following the expiration of a period of three months after the date of receipt of such declaration by the Secretary General.
3. Any declaration made under the two preceding paragraphs may, in respect of any territory specified in such declaration be withdrawn by a notification addressed to the Secretary General. The withdrawal shall become effective on the first day of the month following the expiration of a period of six months after the date of receipt of such notification by the Secretary General.
Article 25
Reservations
No reservation may be made in respect of the provisions of this convention.
Article 26
Denunciation
1. Any Party may at any time denounce this convention by means of a notification addressed to the Secretary General of the Council of Europe.
2. Such denunciation shall become effective on the first day of the month following the expiration of a period of six months after the date of receipt of the notification by the Secretary General.
Article 27
Notifications
The Secretary General of the Council of Europe shall notify the member States of the Council and any State which has acceded to this convention of:
a. any signature;
b. the deposit of any instrument of ratification, acceptance, approval or accession;
c. any date of entry into force of this convention in accordance with Articles 22, 23 and 24;
d. any other act, notification or communication relating to this convention.
In witness whereof the undersigned, being duly authorised thereto, have signed this Convention.
Done at Strasbourg, the 28th day of January 1981, in English and in French, both texts being equally authoritative, in a single copy which shall remain deposited in the archives of the Council of Europe. The Secretary General of the Council of Europe shall transmit certified copies to each member State of the Council of Europe and to any State invited to accede to this Convention.
SECOND SCHEDULE
The Data Protection Commissioner
1. The Commissioner shall be a body corporate and shall be independent in the performance of his functions.
2. (1) The Commissioner shall be appointed by the Government and, subject to the provisions of this Schedule, shall hold office upon such terms and conditions as the Government may determine.
(2) The Commissioner—
(a) may at any time resign his office as Commissioner by letter addressed to the Secretary to the Government and the resignation shall take effect on and from the date of receipt of the letter,
(b) may at any time be removed from office by the Government if, in the opinion of the Government, he has become incapable through ill-health of effectively performing his functions or has committed stated misbehaviour, and
(c) shall, in any case, vacate the office of Commissioner on reaching the age of 65 years.
3. The term of office of a person appointed to be the Commissioner shall be such term not exceeding 5 years as the Government may determine at the time of his appointment and, subject to the provisions of this Schedule, he shall be eligible for re-appointment to the office.
4. (1) Where the Commissioner is—
(a) nominated as a member of Seanad Éireann,
(b) elected as a member of either House of the Oireachtas, the European Parliament or a local authority, or
(c) regarded pursuant to section 15 (inserted by the European Assembly Elections Act, 1984) of the European Assembly Elections Act, 1977, as having been elected to such Parliament to fill a vacancy,
he shall thereupon cease to be the Commissioner.
(2) A person who is for the time being—
(i) entitled under the standing orders of either House of the Oireachtas to sit therein,
(ii) a member of the European Parliament, or
(iii) entitled under the standing orders of a local authority to sit therein,
shall, while he is so entitled or is such a member, be disqualified for holding the office of Commissioner.
5. The Commissioner shall not hold any other office or employment in respect of which emoluments are payable.
6. There shall be paid to the Commissioner, out of moneys provided by the Oireachtas, such remuneration and allowances for expenses as the Minister, with the consent of the Minister for Finance, may from time to time determine.
7. (a) The Minister shall, with the consent of the Minister for Finance, make and carry out, in accordance with its terms, a scheme or schemes for the granting of pensions, gratuities or other allowances on retirement or death to or in respect of persons who have held the office of Commissioner.
(b) The Minister may, with the consent of the Minister for Finance, at any time make and carry out, in accordance with its terms, a scheme or schemes amending or revoking a scheme under this paragraph.
(c) A scheme under this paragraph shall be laid before each House of the Oireachtas as soon as may be after it is made and, if a resolution annulling the scheme is passed by either such House within the next 21 days on which that House has sat after the scheme is laid before it, the scheme shall be annulled accordingly, but without prejudice to the validity of anything previously done thereunder.
8. (1) The Minister may appoint to be members of the staff of the Commissioner such number of persons as may be determined from time to time by the Minister, with the consent of the Minister for Finance.
(2) Members of the staff of the Commissioner shall be civil servants.
(3) The functions of the Commissioner under this Act may be performed during his temporary absence by such member of the staff of the Commissioner as he may designate for that purpose.
(4) The Minister may delegate to the Commissioner the powers exercisable by him under the Civil Service Commissioners Act, 1956, and the Civil Service Regulation Acts, 1956 and 1958, as the appropriate authority in relation to members of the staff of the Commissioner and, if he does so, then so long as the delegation remains in force—
(a) those powers shall, in lieu of being exercisable by the Minister, be exercisable by the Commissioner, and
(b) the Commissioner shall, in lieu of the Minister, be for the purposes of this Act the appropriate authority in relation to members of the staff of the Commissioner.
9. (1) The Commissioner shall keep in such form as may be approved of by the Minister, with the consent of the Minister for Finance, all proper and usual accounts of all moneys received or expended by him and all such special accounts (if any) as the Minister, with the consent of the Minister for Finance, may direct.
(2) Accounts kept in pursuance of this paragraph in respect of each year shall be submitted by the Commissioner in the following year on a date (not later than a date specified by the Minister) to the Comptroller and Auditor General for audit and, as soon as may be after the audit, a copy of those accounts, or of such extracts from those accounts as the Minister may specify, together with the report of the Comptroller and Auditor General on the accounts, shall be presented by the Commissioner to the Minister who shall cause copies of the documents presented to him to be laid before each House of the Oireachtas.
THIRD SCHEDULE
Public Authorities and Other Bodies and Persons
1. The Government.
2. A Minister of the Government.
3. The Attorney General.
4. The Comptroller and Auditor General.
5. The Ombudsman.
6. A local authority, a health board and any other body (other than the Garda Síochána and the Defence Forces) established—
(1) by or under any enactment (other than the Companies Acts, 1963 to 1987), or
(2) under the Companies Acts, 1963 to 1987, in pursuance of powers conferred by or under another enactment,
and financed wholly or partly by means of moneys provided, or loans made or guaranteed, by a Minister of the Government or the issue of shares held by or on behalf of a Minister of the Government; and a subsidiary of any such body.
7. A company the majority of the shares in which are held by or on behalf of a Minister of the Government.
8. A body (other than a body mentioned in paragraph 6 or 7 of this Schedule) appointed by the Government or a Minister of the Government.
9. An individual (other than an individual remunerated by a body mentioned in paragraph 6, 7 or 8 of this Schedule or in relation to whom the Government or a Minister of the Government is the appropriate authority) who is appointed by the Government or a Minister of the Government to an office established by or under any enactment.
10. Any other public authority, body or person standing prescribed for the time being and financed or remunerated wholly or partly out of moneys provided by the Oireachtas.
Uimhir 25 de 1988
AN tACHT UM CHOSAINT SONRAÍ, 1988
RIAR NA nALT
Réamhráiteach
Alt | |
1. |
Príobháideacht Daoine Aonair a Chosaint maidir le Sonraí Pearsanta
2. | Bailiú, próiseáil, coimeád, úsáid agus nochtadh sonraí pearsanta. |
3. | |
4. | |
5. | |
6. | |
7. | Dualgas ar rialaitheoirí sonraí agus ar phróiseálaithe sonraí cúram a ghlacadh. |
8. |
An Coimisinéir Cosanta Sonraí
9. | |
10. | |
11. | |
12. | |
13. | |
14. | |
15. |
Clárú
16. | |
17. | |
18. | |
19. | |
20. |
Ilghnéitheach
21. | |
22. | |
23. | |
24. | |
25. | |
26. | |
27. | |
28. | |
29. | Cionta ag stiúrthóirí, etc., de chuid comhlachtaí corpraithe. |
30. | |
31. | |
32. | |
33. | |
34. | |
35. |
Coinbhinsiún chun Daoine Aonair a Chosaint maidir le Sonraí Pearsanta a Phróiseáil go hUathoibríoch, arna Dhéanamh i Strasbourg an 28ú lá d'Eanáir, 1981.
An Coimisinéir Cosanta Sonraí
Údaráis Phoiblí agus Comhlachtaí agus Daoine Eile
Na hAchtanna dá dTagraítear | |
Achtanna Rialaithe na Státseirbhíse, 1956 agus 1958 | |
Achtanna na gCuideachtaí, 1963 go 1987 | |
Petty Sessions (Ireland) Act, 1851 | 1851, c. 93 |
Public Offices Fees Act, 1879 | 1879, c. 58 |
Uimhir 25 de 1988
AN tACHT UM CHOSAINT SONRAÍ, 1988
[An tiontú oifigiúil]
Réamhráiteach
Léiriú agus feidhmiú an Achta.
1.—(1) San Acht seo, mura n-éilíonn an comhthéacs a mhalairt—
tá le “údarás iomchuí” an bhrí a shanntar dó le hAchtanna Rialaithe na Státseirbhíse, 1956 agus 1958;
ciallaíonn “sonraí cúltaca” sonraí nach gcoimeádtar ach amháin chun sonraí eile a athsholáthar i gcás go gcailltear iad, go milltear iad nó go ndéantar damáiste dóibh;
tá le “státseirbhíseach” an bhrí a shanntar dó le hAchtanna Rialaithe na Státseirbhíse, 1956 agus 1958;
tá le “an Coimisinéir” an bhrí a shanntar dó le halt 9 den Acht seo;
tá le “cuideachta” an bhrí a shanntar dó le hAcht na gCuideachtaí, 1963;
ciallaíonn “an Coinbhinsiún” an Coinbhinsiún chun Daoine Aonair a Chosaint maidir le Sonraí Pearsanta a Phróiseáil go hUathoibríoch arna dhéanamh i Strasbourg an 28ú lá d'Eanáir, 1981, a bhfuil an téacs de leagtha amach sa Chéad Sceideal a ghabhann leis an Acht seo;
ciallaíonn “an Chúirt” an Chúirt Chuarda;
ciallaíonn “sonraí” faisnéis i bhfoirm inar féidir í a phróiseáil;
ciallaíonn “rialaitheoir sonraí” duine a rialaíonn, cibé ina aonar nó le daoine eile, inneachair agus úsáid sonraí pearsanta;
ciallaíonn “trealamh sonraí” trealamh chun sonraí a phróiseáil;
ciallaíonn “sonra-ábhar” aon doiciméad nó ábhar eile a úsáidtear i ndáil le trealamh sonraí nó a tháirgtear leis an trealamh sin;
ciallaíonn “próiseálaí sonraí” duine a phróiseálann sonraí pearsanta thar ceann rialaitheora sonraí ach ní fholaíonn sé fostaí de chuid rialaitheora sonraí a phróiseálann sonraí den sórt sin i gcúrsa a chuid fostaíochta;
ciallaíonn “ábhar sonraí” duine aonair is ábhar do shonraí pearsanta;
folaíonn “dírmhargaíocht” dírphostáil;
folaíonn “nochtadh”, i ndáil le sonraí pearsanta, faisnéis a baineadh amach as na sonraí sin a nochtadh agus na sonraí sin a aistriú ach ní fholaíonn sé nochtadh a dhéanann rialaitheoir sonraí nó próiseálaí sonraí go díreach nó go hindíreach d'fhostaí nó do ghníomhaire dá chuid chun a chumasú don fhostaí nó don ghníomhaire a dhualgais a chomhlíonadh; agus i gcás go mbraitheann sainaithint ábhair sonraí go páirteach ar na sonraí agus go páirteach ar fhaisnéis eile atá i seilbh an rialaitheora sonraí, ní mheasfar gur nochtadh na sonraí murar nochtadh an fhaisnéis eile chomh maith;
ciallaíonn “fógra forfheidhmithe” fógra faoi alt 10 den Acht seo;
ciallaíonn “foras airgeadais”—
(a) duine a shealbhaíonn nó a shealbhaigh ceadúnas faoi alt 9 d'Acht an Bhainc Ceannais, 1971, nó
(b) duine dá dtagraítear in alt 7 (4) den Acht sin;
ciallaíonn “fógra faisnéise” fógra faoi alt 12 den Acht seo;
ciallaíonn “údarás áitiúil” údarás áitiúil chun críocha an Achta Rialtais Áitiúil, 1941;
ciallaíonn “an tAire” an tAire Dlí agus Cirt;
ciallaíonn “sonraí pearsanta” sonraí a bhaineann le duine aonair beo is féidir a aithint ó na sonraí nó ó na sonraí i dteannta faisnéise eile atá i seilbh an rialaitheora sonraí;
ciallaíonn “forordaithe”, i gcás táillí, forordaithe le rialacháin a dhéanann an tAire le toiliú an Aire Airgeadais agus, in aon chás eile, ciallaíonn sé forordaithe le rialacháin a dhéanann an Coimisinéir le toiliú an Aire;
ciallaíonn “próiseáil” loighicoibríochtaí nó oibríochtaí uimhríochtúla a dhéanamh go huathoibríoch ar shonraí agus folaíonn sé—
(a) aon fhaisnéis arb í atá sna sonraí sin a bhaint amach, agus
(b) i ndáil le próiseálaí sonraí, an rialaitheoir sonraí d'úsáid trealaimh sonraí atá i seilbh an phróiseálaí sonraí agus aon seirbhísí eile a sholáthraíonn sé do rialaitheoir sonraí,
ach ní fholaíonn sé oibríocht a dhéantar d'aon toisc chun téacs doiciméad a ullmhú;
ciallaíonn “fógra toirmisc” fógra faoi alt 11 den Acht seo;
ciallaíonn “an clár” an clár a bhunaítear agus a chothabháiltear faoi alt 16 den Acht seo;
agus forléireofar aon fhocail ghaolmhara dá réir sin.
(2) Chun críocha an Achta seo, tá sonraí míchruinn má tá siad mícheart nó míthreorach maidir le haon fhíoras.
(3) (a) Féadfaidh údarás iomchuí, is rialaitheoir sonraí nó próiseálaí sonraí, maidir leis na sonraí pearsanta go léir nó cuid díobh a choimeádann an t-údarás, státseirbhíseach, arb é an t-údarás iomchuí é maidir leis, a ainmniú chun bheith ina rialaitheoir sonraí nó ina phróiseálaí sonraí agus, fad a bheidh an t-ainmniú i bhfeidhm—
(i) measfar, chun críocha an Achta seo, gur rialaitheoir sonraí nó, de réir mar a bheidh, próiseálaí sonraí, an státseirbhíseach a ainmneofar amhlaidh, agus
(ii) ní bhainfidh an tAcht seo leis an údarás,
maidir leis na sonraí lena mbaineann.
(b) Gan dochar do mhír (a) den fho-alt seo, féadfaidh an tAire Cosanta, maidir leis na sonraí pearsanta go léir nó cuid díobh a choimeádann sé i ndáil le hÓglaigh na hÉireann, oifigeach de na Buan-Óglaigh a bhfuil céim choimisiúnta aige iontu a ainmniú chun bheith ina rialaitheoir sonraí nó ina phróiseálaí sonraí agus, fad a bheidh an t-ainmniú i bhfeidhm—
(i) measfar, chun críocha an Achta seo, gur rialaitheoir sonraí nó, de réir mar a bheidh, próiseálaí sonraí, an t-oifigeach a ainmneofar amhlaidh, agus
(ii) ní bhainfidh an tAcht seo leis an Aire Cosanta,
maidir leis na sonraí lena mbaineann.
(c) Chun críocha an Achta seo, maidir le haon sonraí pearsanta—
(i) más rud é nach mbeidh ainmniú ón údarás iomchuí ábhartha faoi mhír (a) den fho-alt seo i bhfeidhm, measfar gur fostaí den údarás sin státseirbhíseach arb é an t-údarás sin an t-údarás iomchuí maidir leis agus, más rud é go mbeidh ainmniú den sórt sin i bhfeidhm, measfar, maidir le státseirbhíseach den sórt sin (seachas an státseirbhíseach arb é is ábhar don ainmniú) gur fostaí é den státseirbhíseach deireanach a luaitear,
(ii) más rud é nach mbeidh ainmniú faoi mhír (b) den fho-alt seo i bhfeidhm, measfar gur fostaí den Aire Cosanta comhalta d'Óglaigh na hÉireann agus, más rud é go mbeidh ainmniú den sórt sin i bhfeidhm measfar gur fostaí de chuid an oifigigh sin comhalta den sórt sin (seachas an t-oifigeach arb é is ábhar don ainmniú), agus
(iii) measfar, maidir le comhalta den Gharda Síochána (seachas Coimisinéir an Gharda Síochána), gur fostaí de chuid an Choimisinéara sin é.
(4) Ní bhaineann an tAcht seo—
(a) le sonraí pearsanta a choimeádtar, nó a coimeádadh tráth ar bith, i dtuairim an Aire nó an Aire Cosanta, chun slándáil an Stáit a chosaint,
(b) le sonraí pearsanta arb é atá iontu faisnéis a gceanglaítear le dlí ar an duine a choimeádann na sonraí iad a chur ar fáil don phobal, nó
(c) le sonraí pearsanta a choimeádann duine aonair agus nach mbaineann ach amháin lena chúrsaí pearsanta, teaghlaigh nó tís a bhainistiú nó nach gcoimeádann duine aonair ach amháin mar chaitheamh aimsire.
Príobháideacht Daoine Aonair a Chosaint maidir le Sonraí Pearsanta
Bailiú, próiseail, coimeád, úsáid agus nochtadh sonraí pearsanta.
2.—(1) Comhlíonfaidh rialaitheoir sonraí, maidir le sonraí pearsanta a choimeádann sé, na forálacha seo a leanas:
(a) beidh na sonraí nó, de réir mar a bheidh, an fhaisnéis arb í atá sna sonraí, faighte go cóir cothrom agus próiseálfar na sonraí go cóir cothrom,
(b) beidh na sonraí beacht agus, más gá é, coimeádfar cothrom le dáta iad,
(c) maidir leis na sonraí—
(i) ní choimeádfar iad ach amháin le haghaidh críche sonraithe agus dleathaí amháin nó níos mó,
(ii) ní úsáidfear iad ná ní nochtfar iad in aon slí a bheidh ar neamhréir leis an gcríoch sin nó leis na críocha sin,
(iii) beidh siad leordhóthanach agus ábhartha agus ní bheidh siad iomarcach i ndáil leis an gcríoch nó leis na críocha sin, agus
(iv) ní choimeádfar iad níos faide ná mar is gá le haghaidh na críche nó na gcríoch sin,
(d) glacfar bearta slándála iomchuí in aghaidh rochtana neamhúdaraithe chuig na sonraí nó in aghaidh athrú, nochtadh nó milleadh neamhúdaraithe a dhéanamh orthu agus in aghaidh a gcaillte nó a millte trí thionóisc.
(2) Déanfaidh próiseálaí sonraí, maidir le sonraí pearsanta a phróiseálfaidh sé, mír (d) d'fho-alt (1) den alt seo a chomhlíonadh.
(3) Ní bhaineann mír (a) den fho-alt sin (1) le faisnéis a bheartaítear a áireamh i sonraí a choimeádtar chun críche a luaitear in alt 5 (1) (a) den Acht seo, ná le sonraí a choimeádtar amhlaidh, in aon chás inar dóigh go ndéanfadh feidhmiú na míre sin maidir leis na sonraí dochar d'aon ní de na nithe a luaitear san alt sin 5 (1) (a).
(4) Ní bhaineann mír (b) den fho-alt sin (1) le sonraí cúltaca.
(5) (a) Ní bhaineann mír (c) (iv) den fho-alt sin (1) le sonraí pearsanta a choimeádtar chun críocha stairiúla, staitistiúla nó taighde, agus
(b) ní mheasfar, chun críocha mhír (a) den fho-alt sin, maidir leis na sonraí nó, de réir mar a bheidh, leis an bhfaisnéis arb í atá sna sonraí sin, go bhfuarthas iad go héagórach de thoisc amháin nár nochtadh úsáid na sonraí sin chun críche ar bith den sórt sin nuair a fuarthas iad,
mura n-úsáidtear na sonraí ar shlí atá, nó is dóigh a bheadh, ina chúis damáiste nó anó d'aon ábhar sonraí.
(6) (a) D'fhonn cosaintí breise a chur ar fáil i ndáil le sonraí pearsanta maidir le bunadh cine, tuairimí polaitíochta, tuairimí creidimh nó tuairimí eile, sláinte coirp nó meabhrach, cleachtadh gnéis nó ciontuithe coiriúla, féadfaidh an tAire fo-alt (1) den alt seo a leasú le rialacháin.
(b) Féadfaidh rialacháin faoin alt seo foráil éagsúil a dhéanamh i ndáil le sonraí de thuairiscí éagsúla.
(c) Déanfar tagairtí san Acht seo d'fho-alt (1) den alt seo nó d'fhoráil den fho-alt sin a fhorléiriú de réir aon leasaithe a dhéanfar faoin alt seo.
(d) Ní dhéanfar rialacháin faoin alt seo go dtí go rachfar i gcomhairle le haon Aire eile de chuid an Rialtais, ar cheart, ag féachaint dá chuid feidhmeanna, dul i gcomhairle leis i dtuairim an Aire.
(e) Más rud é go mbeartaítear rialacháin a dhéanamh faoin alt seo, leagfar dréacht de na rialacháin faoi bhráid gach Tí den Oireachtas agus ní dhéanfar na rialacháin go dtí go mbeidh rún ag ceadú an dréachta rite ag gach Teach díobh sin.
(7) Más rud é—
(a) go gcoimeádtar sonraí pearsanta chun críche dírmhargaíochta, agus
(b) go n-iarrann an t-ábhar sonraí lena mbaineann ar an rialaitheoir sonraí, i scríbhinn, scor d'úsáid a bhaint as na sonraí chun na críche sin,
déanfaidh an rialaitheoir sonraí, a luaithe is féidir agus in aon chás tráth nach déanaí ná 40 lá tar éis an t-iarratas a bheith tugtha dó nó curtha chuige—
(i) mura gcoimeádtar na sonraí ach amháin chun na críche a dúradh, na sonraí a scriosadh,
(ii) má choimeádtar na sonraí chun na críche sin agus chun críocha eile, scor d'úsáid a bhaint as na sonraí chun na críche sin, agus
(iii) scéala dá réir sin a thabhairt i scríbhinn don ábhar sonraí agus, más iomchuí, na críocha eile sin a chur in iúl dó.
Ceart chun a chruthú go bhfuil sonraí pearsanta ann.
3.—I gcás go gcreideann duine aonair go bhfuil sonraí pearsanta á gcoimeád ag duine, ní foláir don duine sin, má iarrann an duine aonair i scríbhinn air amhlaidh—
(a) a chur in iúl don duine aonair cibé acu atá nó nach bhfuil aon sonraí den sórt sin á gcoimeád aige, agus
(b) más rud é go bhfuil, tuairisc a thabhairt don duine aonair i dtaobh na sonraí agus na gcríoch dá gcoimeádtar iad,
a luaithe is féidir agus in aon chás tráth nach déanaí ná 21 lá tar éis an t-iarratas a bheith tugtha dó nó curtha chuige.
Ceart rochtana.
4.—(1) (a) Faoi réir fhorálacha an Achta seo, má iarrann duine aonair i scríbhinn amhlaidh ar rialaitheoir sonraí—
(i) cuirfidh an rialaitheoir sonraí in iúl dó cibé acu atá nó nach bhfuil sonraí pearsanta a bhaineann leis an duine aonair ar áireamh sna sonraí a choimeádann sé, agus
(ii) déanfaidh an rialaitheoir sonraí cóip den fhaisnéis arb í atá in aon sonraí den sórt sin a chur ar fáil dó,
a luaithe is féidir agus in aon chás tráth nach déanaí ná 40 lá tar éis don duine aonair forálacha an ailt seo a chomhlíonadh; agus más rud é go mbeidh aon chuid den fhaisnéis sloinnte i dtéarmaí nach intuigthe don ghnáthdhuine gan míniú, cuirfear míniú na dtéarmaí sin ag gabháil leis an bhfaisnéis.
(b) Déileálfar le hiarraidh ar an bhfaisnéis a shonraítear i bhfomhír (i) d'fho-alt (1) (a) den alt seo, in éagmais aon chomhartha dá mhalairt, mar iarraidh ina n-áirítear iarraidh ar chóip den fhaisnéis a shonraítear i bhfomhír (ii) den fho-alt sin (1) (a).
(c) (i) Féadfaidh táille a bheith iníoctha leis an rialaitheoir sonraí lena mbaineann maidir le hiarraidh den sórt sin a dúradh agus ní bheidh méid na táille níos mó ná cibé méid a bheidh forordaithe nó cibé méid a bheidh réasúnach, i dtuairim an Choimisinéara, ag féachaint don chostas measta ar an rialaitheoir sonraí as an iarraidh a chomhlíonadh, cibé acu is lú.
(ii) Aon táille a íocfaidh duine aonair le rialaitheoir sonraí faoi fhomhír (i) den mhír seo, cuirfear ar ais chuige í mura gcomhlíonfar a iarraidh nó má cheartaíonn nó má fhorlíonann an rialaitheoir sonraí na sonraí lena mbaineann nó má scriosann sé cuid díobh (agus go modhnaíonn sé na sonraí go hábhartha dá réir sin) nó má scriosann sé na sonraí go léir ar iarratas ón duine aonair nó de réir fógra fhorfheidhmithe nó ordaithe cúirte.
(2) Más rud é, de bhun forála a dhéantar chuige sin faoin Acht seo, go mbeidh taifid ar leith sa chlár maidir le sonraí a choimeádann rialaitheoir sonraí chun críocha éagsúla, beidh feidhm ag fo-alt (1) den alt seo amhail is dá bhforálfadh sé le haghaidh iarrata ar leith a dhéanamh agus táille ar leith a íoc maidir leis na sonraí lena mbaineann gach taifead ar leith.
(3) Soláthróidh duine aonair a dhéanann iarraidh faoin alt seo cibé faisnéis don rialaitheoir sonraí lena mbaineann a éileoidh sé go réasúnach chun é féin a shásamh maidir le céannacht an duine aonair agus chun aon sonraí pearsanta nó faisnéis ábhartha a aimsiú.
(4) Ní chuirfidh aon ní i bhfo-alt (1) den alt seo d'oibleagáid ar rialaitheoir sonraí sonraí pearsanta a bhaineann le duine aonair eile a nochtadh d'ábhar sonraí mura dtoileoidh an duine aonair eile sin leis an nochtadh:
Ar choinníoll, más rud é go mbeidh na himthosca ar dhóigh go mbeadh sé réasúnach don rialaitheoir sonraí a mheas, dá bhfágfaí ar lár aon mhionsonraí trína sainaithnítear an duine aonair eile sin, go bhféadfaí ansin na sonraí a nochtadh mar a dúradh gan é a bheith inaitheanta dá bharr don ábhar sonraí, go mbeidh d'oibleagáid ar an rialaitheoir sonraí na sonraí a nochtadh don ábhar sonraí ach na mionsonraí sin a fhágáil ar lár.
(5) Féadfaidh faisnéis a sholáthrófar de bhun iarrata faoi fho-alt (1) den alt seo aon leasú ar na sonraí pearsanta lena mbaineann, a rinneadh ó fuair an rialaitheoir sonraí an iarraidh (ar leasú é a bheadh déanta fiú mura mbeadh iarraidh faighte), a chur i gcuntas ach ní chuirfidh sé aon leasú eile i gcuntas.
(6) (a) Maidir le hiarraidh ó dhuine aonair faoi fho-alt (1) den alt seo i ndáil le torthaí scrúdaithe ina raibh sé mar iarrthóir, measfar, chun críocha an ailt seo, go ndearnadh í—
(i) ar an dáta ar ar foilsíodh torthaí an scrúdaithe den chéad uair, nó
(ii) ar dháta na hiarrata,
cibé acu is déanaí; agus forléireofar mír (a) den fho-alt sin (1) agus beidh éifeacht léi i ndáil le hiarraidh den sórt sin amhail is dá gcuirfí “60 lá” in ionad “40 lá”.
(b) San fho-alt seo ciallaíonn “scrúdú” aon phróiseas chun eolas, intleacht, scil nó cumas duine a chinneadh trí thagairt don chaoi ar chruthaigh sé in aon tástáil, obair nó gníomhaíocht eile.
(7) Aon fhógra á rá gur diúltaíodh d'iarraidh a rinne duine aonair faoi réim agus i gcomhlíonadh na bhforálacha sin roimhe seo den alt seo, beidh sé i scríbhinn agus folófar ráiteas ann i dtaobh na gcúiseanna a bhí leis an diúltú agus léiriú go bhféadfaidh an duine aonair gearán a dhéanamh leis an gCoimisinéir faoin diúltú.
(8) (a) Má bheartaíonn an tAire agus aon uair a bheartaíonn sé gurb inmhianaithe déanamh amhlaidh ar mhaithe le hábhair shonraí agus go ndearbhaíonn sé amhlaidh le rialacháin, féadfar feidhmiú an ailt seo maidir le sonraí pearsanta—
(i) a bhaineann le sláinte coirp nó meabhrach, nó
(ii) a choimeádtar le go gcuirfeadh Aire Rialtais, údarás áitiúil, bord sláinte nó eagraíocht dheonach shonraithe nó comhlacht eile obair shóisialta i gcrích nó a fhaightear le linn dóibh obair shóisialta a chur i gcrích,
a mhodhnú leis na rialacháin i cibé slí, i cibé imthosca, faoi réir cibé cosaintí agus go feadh cibé méid a bheidh sonraithe sna rialacháin.
(b) Ní dhéanfar rialacháin faoi mhír (a) den fho-alt seo go dtí go rachfar i gcomhairle leis an Aire Sláinte agus le haon Aire eile de chuid an Rialtais, ar cheart, ag féachaint dá chuid feidhmeanna, dul i gcomhairle leis, i dtuairim an Aire, agus féadfaidh siad foráil éagsúil a dhéanamh i ndáil le sonraí de thuairiscí éagsúla.
Srian ar cheart rochtana.
5.—(1) Ní bhaineann alt 4 den Acht seo le sonraí pearsanta—
(a) a choimeádtar chun cionta a chosc, a bhrath nó a imscrúdú, chun ciontóirí a ghabháil nó a ionchúiseamh nó chun aon cháin, dleacht nó airgead eile atá dlite don Stát, d'údarás áitiúil nó do bhord sláinte, nó is iníoctha leo, a mheasúnú nó a bhailiú, in aon chás inar dhóigh go ndéanfadh feidhmiú an ailt sin maidir leis na sonraí dochar d'aon cheann de na nithe a dúradh,
(b) nach mbaineann an t-alt sin 4 leo de bhua mhír (a) den fho-alt seo, agus a choimeádtar chun feidhm a urscaoileadh a thugtar le haon achtachán nó faoi agus arb é atá iontu faisnéis a fhaightear chun críche den sórt sin ó dhuine a raibh sí ina sheilbh aige le haghaidh aon chríche de na críocha a luaitear i mír (a) den fho-alt seo,
(c) in aon chás inar dhóigh go ndéanfadh feidhmiú an ailt sin dochar do shlándáil, nó do dhea-ord agus do smacht a choinneáil—
(i) i bpríosún,
(ii) in áit choinneála a sholáthraítear faoi alt 2 d'Acht na bPríosún, 1970,
(iii) i bpríosún míleata nó i mbeairic coinneála de réir bhrí an Achta Cosanta, 1954, nó
(iv) i bhForas Naomh Pádraig,
(d) a choimeádtar chun cibé feidhmeanna a chomhlíonadh, a thugtar le haon achtachán nó faoi, a bheidh sonraithe le rialacháin arna ndéanamh ag an Aire, ar feidhmeanna iad, i dtuairim an Aire, atá ceaptha chun comhaltaí den phobal a chosaint ar chaillteanas airgeadais—
(i) de dheasca mímhacántachta, neamhinniúlachta nó míchleachtais ag daoine a mbíonn baint acu le baincéireacht, árachas, infheistíocht nó seirbhísí airgeadais eile a sholáthar nó le bainisteoireacht cuideachtaí nó eagraíochtaí dá samhail, nó
(ii) de dheasca iompar daoine a breithníodh ina bhféimhigh tráth ar bith,
in aon chás inar dhóigh go ndéanfadh feidhmiú an ailt sin maidir leis na sonraí dochar do chomhlíonadh cuí aon fheidhm de na feidhmeanna sin,
(e) a mbeadh feidhmiú an ailt sin ina leith contrártha do leasanna an Stáit ó thaobh a chaidreamh idirnáisiúnta a chosaint,
(f) arb é atá iontu meastachán, nó a choimeádtar chun meastachán a dhéanamh, ar mhéid dhliteanas an rialaitheora sonraí lena mbaineann ar scór éilimh chun suim airgid a íoc, cibé acu maidir le damáistí nó le cúiteamh, in aon chás inar dhóigh go ndéanfadh feidhmiú an ailt dochar do leasanna an rialaitheora sonraí i ndáil leis an éileamh,
(g) a bhféadfaí éileamh pribhléide a choimeád ar bun ina leith in imeachtaí i gcúirt i ndáil le cumarsáidí idir cliant agus a chomhairleoirí dlí gairmiúla nó idir na comhairleoirí sin,
(h) nach gcoimeádtar ach amháin chun staitisticí a ullmhú nó taighde a chur i gcrích mura n-úsáidtear nó mura nochtar na sonraí (seachas do dhuine a bhféadfar na sonraí sin a nochtadh dó sna himthosca a shonraítear in alt 8 den Acht seo) chun aon chríche eile agus mura gcuirtear na staitisticí a thagann as sin nó torthaí an taighde ar fáil i bhfoirm a shainaithníonn aon duine de na hábhair shonraí, nó
(i) ar sonraí cúltaca iad.
(2) Ní dhéanfar rialacháin faoi fho-ailt (1) (d) agus (3) (b) den alt seo go dtí go rachfar i gcomhairle le haon Aire eile de chuid an Rialtais ar cheart, ag féachaint dá chuid feidhmeanna, dul i gcomhairle leis, i dtuairim an Aire.
(3) (a) Faoi réir mhír (b) den fho-alt seo beidh feidhm ag alt 4 den Acht seo, arna mhodhnú le haon fhorálacha eile den Acht seo, d'ainneoin aon fhoráil d'aon achtachán nó riail dlí nó aon fhoráil a dhéantar fúthu a bhí i bhfeidhm díreach roimh dháta an Achta seo a rith agus a thoirmisceann nó a shrianann nochtadh faisnéise nó a údaraíonn faisnéis a choimeád siar.
(b) Más dóigh leis an Aire, agus aon uair is dóigh leis, gur cheart toirmeasc, srian nó údarú dá dtagraítear i mír (a) den fho-alt seo i ndáil le haon fhaisnéis a bheith i bhfeidhm ar mhaithe leis na hábhair shonraí lena mbaineann nó le haon daoine aonair eile agus má dhearbhaíonn sé amhlaidh le rialacháin, ansin, fad a bheidh na rialacháin i bhfeidhm, ní bheidh feidhm ag an mír sin (a) maidir leis an bhforáil nó leis an riail dlí lena mbaineann agus dá réir sin ní bheidh feidhm ag alt 4 den Acht seo, arna mhodhnú mar a dúradh, i ndáil leis an bhfaisnéis sin.
Ceart chun ceartú nó scriosadh a dhéanamh.
6.—(1) Má iarrann duine aonair i scríbhinn amhlaidh ar rialaitheoir sonraí a choimeádann sonraí pearsanta a bhaineann leis, beidh sé i dteideal go ndéanfaí aon sonraí den sórt sin, a bhfuil sárú déanta ag an rialaitheoir sonraí ar alt 2 (1) den Acht seo i ndáil leo, a cheartú nó, más iomchuí, a scriosadh; agus déanfaidh an rialaitheoir sonraí de réir na hiarrata a luaithe is féidir agus in aon chás tráth nach déanaí ná 40 lá tar éis í a bheith tugtha dó nó curtha chuige:
Ar choinníoll go measfar, maidir le sonraí nach bhfuil beacht nó nach bhfuil cothrom le dáta—
(a) go ndearna an rialaitheoir sonraí de réir na hiarrata má fhorlíonann sé na sonraí le ráiteas (ar aontaigh an duine aonair lena théarmaí) a bhaineann leis na nithe lena ndéileálann na sonraí, agus
(b) má chuireann an rialaitheoir sonraí forlíonadh leis na sonraí mar a dúradh, nach ndearna sé sárú ar mhír (b) den alt sin 2 (1).
(2) Ar rialaitheoir sonraí do dhéanamh de réir iarrata faoi fho-alt (1) den alt seo, déanfaidh sé, a luaithe is féidir agus in aon chás tráth nach déanaí ná 40 lá tar éis an iarraidh a bheith tugtha dó nó curtha chuige, an ceartú, an scriosadh nó an ráiteas lena mbaineann a chur in iúl—
(a) don duine aonair a rinne an iarraidh, agus
(b) i gcás go modhnaíonn an comhlíonadh sin go hábhartha na sonraí lena mbaineann, d'aon duine ar nochtadh na sonraí dó le linn na tréimhse 12 mhí díreach sular tugadh an iarraidh dó nó sular cuireadh chuige í.
Dualgas ar rialaitheoirí sonraí agus ar phróiseálaithe sonraí cúram a ghlacadh.
7.—Chun críocha dhlí na dtortanna agus sa mhéid nach bhforálann an dlí sin amhlaidh, beidh sé de dhualgas ar dhuine ar rialaitheoir sonraí nó próiseálaí sonraí é, a mhéid a bhaineann le sonraí pearsanta nó faisnéis a bheartaítear a chur isteach sna sonraí sin a bhailiú aige nó lena dhéileáil leis na sonraí sin, cúram a ghlacadh i leith an ábhair sonraí lena mbaineann:
Ar choinníoll, chun críocha an ailt seo amháin, go measfar go ndearna rialaitheoir sonraí de réir fhorálacha alt 2 (1) (b) den Acht seo má thaifeadtar, agus fad a thaifeadtar, go beacht sna sonraí pearsanta lena mbaineann sonraí nó faisnéis eile a ghlac nó a fuair sé ón ábhar sonraí nó ó thríú páirtí agus go bhfolaíonn siad (agus, má nochtar na sonraí, go mbeidh ag gabháil leis an nochtadh)—
(a) léiriú gur glacadh nó go bhfuarthas mar a dúradh, an fhaisnéis arb í atá sna sonraí,
(b) más cuí, léiriú gur chuir an t-ábhar sonraí in iúl don rialaitheoir sonraí go measann sé nach bhfuil an fhaisnéis beacht nó nár coimeádadh í cothrom le dáta, agus
(c) aon ráiteas lenar forlíonadh na sonraí, de bhun an Achta seo.
Sonraí pearsanta a nochtadh i gcásanna áirithe.
8.—Ní bheidh feidhm ag aon srianta san Acht seo ar shonraí pearsanta a nochtadh má bhíonn an nochtadh mar a leanas—
(a) riachtanach chun slándáil an Stáit a chosaint, i dtuairim chomhalta den Gharda Síochána nach bhfuil faoi bhun chéim ard-cheannfoirt nó oifigigh de na Buan-Óglaigh ag a bhfuil céim airm nach bhfuil faoi bhun coirnéil agus a bheidh ainmnithe ag an Aire Cosanta faoin mír seo,
(b) riachtanach chun cionta a chosc, a bhrath nó a imscrúdú, chun ciontóirí a ghabháil nó a ionchúiseamh nó chun aon cháin, dleacht nó airgead eile atá dlite don Stát, d'údarás áitiúil nó do bhord sláinte, nó is iníoctha leo, a mheasúnú nó a bhailiú, in aon chás inar dhóigh go ndéanfadh feidhmiú na srianta sin dochar d'aon cheann de na nithe a dúradh,
(c) riachtanach ar mhaithe le caidreamh idirnáisiúnta an Stáit a chosaint,
(d) riachtanach go práinneach chun díobháil nó damáiste eile do shláinte duine, nó chun caillteanas mór maoine nó damáiste mór do mhaoin, a chosc,
(e) riachtanach mar gheall ar aon achtachán nó faoi aon achtachán nó mar gheall ar aon riail dlí nó ordú cúirte,
(f) riachtanach chun comhairle dlí a fháil nó chun críocha, nó le linn, imeachtaí dlíthiúla inar páirtí nó finné an duine a dhéanann an nochtadh,
(g) á dhéanamh leis an ábhar sonraí lena mbaineann nó le duine atá ag gníomhú thar a cheann, nó
(h) á dhéanamh ar iarraidh nó le toiliú ón ábhar sonraí nó ó dhuine atá ag gníomhú thar a cheann.
An Coimisinéir Cosanta Sonraí
An Coimisinéir.
9.—(1) Chun críocha an Achta seo, beidh duine ann (dá ngairtear an Coimisinéir san Acht seo) ar a dtabharfar an Coimisinéir Cosanta Sonraí, nó sa Bhéarla, the Data Protection Commissioner; comhlíonfaidh an Coimisinéir na feidhmeanna a thugtar dó leis an Acht seo.
(2) Beidh éifeacht le forálacha an Dara Sceideal a ghabhann leis an Acht seo i ndáil leis an gCoimisinéir.
Cosaint sonraí a fhorfheidhmiú.
10.—(1) (a) Féadfaidh an Coimisinéir imscrúdú a dhéanamh, nó a chur faoi deara imscrúdú a dhéanamh, cibé acu atá aon fhoráil d'fhorálacha an Achta seo sáraithe, á sárú nó ar dóigh go sárófar iad ag rialaitheoir sonraí nó ag próiseálaí sonraí i ndáil le duine aonair i gcás go ndéanann an duine aonair gearán leis faoi shárú ar aon fhoráil de na forálacha sin nó go mbíonn sé den tuairim ar shlí eile go bhféadfadh sárú den sórt sin a bheith ann.
(b) I gcás go ndéanfar gearán leis an gCoimisinéir faoi mhír (a) den fho-alt seo, déanfaidh ar. Coimisinéir—
(i) an gearán a imscrúdú nó a chur faoi deara é a imscrúdú, mura dóigh leis gur gearán suaibhreosach nó cráiteach é, agus
(ii) scéala a thabhairt i scríbhinn a luaithe is féidir don duine aonair lena mbaineann faoina chinneadh i ndáil leis an ngearán agus go bhféadfaidh an duine aonair, más éagóir dó a chinneadh, achomharc a dhéanamh ina aghaidh chuig an gCúirt faoi alt 26 den Acht seo laistigh de 21 lá ón lá a bhfaighidh sé an scéala.
(2) Más é tuairim an Choimisinéara go bhfuil foráil den Acht seo (seachas foráil ar cion í a shárú) sáraithe nó á sárú ag duine is rialaitheoir sonraí nó is próiseálaí sonraí, féadfaidh an Coimisinéir, trí fhógra i scríbhinn (dá ngairtear fógra forfheidhmithe san Acht seo) a sheirbheálfar ar an duine, a cheangal air cibé bearta a dhéanamh a bheidh sonraithe san fhógra, laistigh de cibé tráth a bheidh sonraithe amhlaidh, chun déanamh de réir na forála lena mbaineann.
(3) Gan dochar do ghinearáltacht fho-alt (2) den alt seo, más é tuairim an Choimisinéara gur sháraigh rialaitheoir sonraí alt 2 (1) den Acht seo, féadfar a cheangal air, leis an bhfógra forfheidhmithe iomchuí—
(a) aon sonraí de na sonraí lena mbaineann a cheartú nó a scriosadh, nó
(b) cibé ráiteas a cheadóidh an Coimisinéir, agus a bhaineann leis na nithe lena ndéileálann na sonraí, a chur mar fhor líonadh leo; agus más rud é, maidir le sonraí nach bhfuil beacht nó nach bhfuil cothrom le dáta, go gcuireann sé forlíonadh leo mar a dúradh, measfar nach ndearna sé sárú ar mhír (b) den alt sin 2 (1).
(4) Maidir le fógra forfheidhmithe—
(a) sonróidh sé aon fhoráil den Acht seo atá sáraithe nó á sárú, i dtuairim an Choimisinéara, agus na cúiseanna atá aige leis an tuairim sin, agus
(b) faoi réir fho-alt (6) den alt seo, luafar ann go bhféadfaidh an duine lena mbaineann, laistigh de 21 lá ón lá a sheirbheálfar an fógra air, achomharc a dhéanamh chuig an gCúirt faoi alt 26 den Acht seo in aghaidh an cheanglais a shonraítear san fhógra.
(5) Faoi réir fho-alt (6) den alt seo, maidir leis an am a bheidh sonraithe i bhfógra forfheidhmithe chun déanamh de réir ceanglais a bheidh sonraithe san fhógra sin, ní bheidh sé sainráite go rachaidh sé in éag roimh dheireadh na tréimhse 21 lá a shonraítear i bhfo-alt (4) (b) den alt seo agus, má thionscnaítear achomharc in aghaidh an cheanglais, ní gá déanamh de réir an cheanglais agus ní bheidh feidhm ag fo-alt (9) den alt seo i ndáil leis an gceanglas go dtí go ndéanfar an t-achomharc a chinneadh nó a tharraingt siar.
(6) Más rud é, i gcás an Choimisinéara—
(a) go mbeidh sé, de bharr imthosca speisialta, den tuairim gur cheart ceanglas a bheidh sonraithe i bhfógra forfheidhmithe a chomhlíonadh go práinneach, agus
(b) go gcuirfidh sé ráiteas á rá sin san fhógra,
ní bheidh feidhm ag fo-ailt (4) (b) agus (5) den alt seo i ndáil leis an bhfógra, ach beidh ráiteas san fhógra faoi éifeacht fhorálacha alt 26 (seachas fo-alt (3)) den Acht seo agus ní cheanglófar an ceanglas a chomhlíonadh roimh dheireadh na tréimhse 7 lá dar tosach an dáta ar a seirbheálfar an fógra.
(7) Ar rialaitheoir sonraí do chomhlíonadh ceanglais faoi fho-alt (3) den alt seo, déanfaidh sé, a luaithe is féidir agus in aon chás tráth nach déanaí ná 40 lá tar éis chomhlíonadh an cheanglais sin, an ceartú, an scriosadh nó an ráiteas lena mbaineann a chur in iúl—
(a) don ábhar sonraí lena mbaineann, agus
(b) i gcás go modhnaíonn an comhlíonadh sin go hábhartha na sonraí lena mbaineann, d'aon duine ar nochtadh na sonraí dó le linn na tréimhse a thosaigh 12 mhí roimh an dáta ar seirbheáladh an fógra forfheidhmithe lena mbaineann agus a chríochnaigh díreach roimh an gcomhlíonadh sin.
(8) Féadfaidh an Coimisinéir fógra forfheidhmithe a chealú agus má dhéanann sé amhlaidh cuirfidh sé sin in iúl i scríbhinn don duine ar seirbheáladh air é dá réir sin.
(9) Beidh duine ciontach i gcion má mhainníonn nó má dhiúltaíonn sé, gan leithscéal réasúnach, ceanglas a bheidh sonraithe i bhfógra forfheidhmithe a chomhlíonadh.
Toirmeasc ar shonraí pearsanta a aistriú amach as an Stát.
11.—(1) Féadfaidh an Coimisinéir, faoi réir fhorálacha an ailt seo, aistriú sonraí pearsanta ón Stát chuig áit lasmuigh den Stát a thoirmeasc.
(2) Tabharfaidh an Coimisinéir aird ar fhorálacha Airteagal 12 den Choinbhinsiún nuair a bheidh sé ag breithniú ar cheart aistriú a bheartaítear a dhéanamh ar shonraí pearsanta ón Stát chuig áit i stát atá faoi cheangal ag an gCoinbhinsiún a thoirmeasc.
(3) Ní dhéanfaidh an Coimisinéir aistriú a bheartaítear a dhéanamh ar shonraí pearsanta ón Stát chuig áit lasmuigh den Stát a thoirmeasc mura mbeidh sé den tuairim gur dóigh go dtiocfadh den aistriú, dá mba i stát atá faoi cheangal ag an gCoinbhinsiún a bheadh an áit sin, go sárófaí na bunphrionsabail a ghabhann le cosaint sonraí mar atá leagtha amach i gCaibidil II den Choinbhinsiún.
(4) Le linn don Choimisinéir a bheith á chinneadh ar cheart aistriú sonraí pearsanta a thoirmeasc faoin alt seo, breithneoidh sé freisin cé acu a d'fhéadfadh an t-aistriú a bheith ina chúis damáiste nó anó d'aon duine agus beidh aird aige ar a inmhianaithe atá sé aistrithe idirnáisiúnta sonraí a urasú.
(5) Is trí fhógra (dá ngairtear fógra toirmisc san Acht seo) a sheirbheáil ar an duine a bheartaíonn na sonraí lena mbaineann a aistriú a dhéanfar toirmeasc faoi fho-alt (1) den alt seo.
(6) Maidir le fógra toirmisc—
(a) toirmiscfidh sé an t-aistriú lena mbaineann go hiomlán nó go dtí go mbeidh cibé bearta a bheidh sonraithe san fhógra chun leasanna na n-ábhar sonraí lena mbaineann a chosaint, déanta ag an duine réamhráite,
(b) sonrófar ann an tráth a dtiocfaidh sé in éifeacht,
(c) sonróidh sé na forais atá leis an toirmeasc, agus
(d) faoi réir fho-alt (8) den alt seo, luafaidh sé go bhféadfaidh an duine lena mbaineann, laistigh de 21 lá ón lá a sheirbheálfar an fógra air, achomharc a dhéanamh chun na Cúirte faoi alt 26 den Acht seo in aghaidh an toirmisc a shonraítear san fhógra.
(7) Faoi réir fho-alt (8) den alt seo, maidir leis an am a bheidh sonraithe i bhfógra toirmisc chun an toirmeasc a shonraítear ann a chomhlíonadh, ní bheidh sé sainráite go rachaidh sé in éag roimh dheireadh na tréimhse 21 lá a shonraítear i bhfo-alt (6) (d) den alt seo agus, má thionscnaítear achomharc in aghaidh an toirmisc, ní gá an toirmeasc a chomhlíonadh agus ní bheidh feidhm ag fo-alt (13) den alt seo i ndáil leis go dtí go ndéanfar an t-achomharc a chinneadh nó a tharraingt siar.
(8) Más rud é, i gcás an Choimisinéara—
(a) go mbeidh sé, de bharr imthosca speisialta, den tuairim gur cheart toirmeasc a bheidh sonraithe i bhfógra toirmisc a chomhlíonadh go práinneach, agus
(b) go gcuirfidh sé ráiteas á rá sin san fhógra,
ní bheidh feidhm ag fo-ailt (6) (d) agus (7) den alt seo i ndáil leis an bhfógra ach beidh ráiteas san fhógra faoi éifeacht fhorálacha alt 26 (seachas fo-alt (3)) den Acht seo ann agus ní cheanglófar an toirmeasc a chomhlíonadh roimh dheireadh na tréimhse 7 lá dar tosach an dáta ar a seirbheálfar an fógra.
(9) Féadfaidh an Coimisinéir fógra toirmisc a chealú agus má dhéanann sé amhlaidh, cuirfidh sé sin in iúl i scríbhinn don duine ar seirbheáladh air é.
(10) Ní bheidh feidhm ag an alt seo maidir le haistriú sonraí má cheanglaítear nó má údaraítear aistriú na sonraí nó na faisnéise arb í atá sna sonraí le haon achtachán nó faoi aon achtachán nó má cheanglaítear an t-aistriú sin le haon choinbhinsiún nó ionstraim eile lena bhforchuirtear oibleagáid idirnáisiúnta ar an Stát.
(11) Chun críocha an ailt seo, measfar gur i stát atá faoi cheangal ag an gCoinbhinsiún atá áit má bhíonn an áit sin in aon chríoch a bhfuil an stát faoi cheangal amhlaidh maidir léi.
(12) (a) Beidh feidhm ag an alt seo, fara aon mhodhnuithe is gá, maidir le faisnéis a aistriú ón Stát chuig áit lasmuigh den Stát lena tiontú go sonraí pearsanta amhail mar atá feidhm aige maidir le sonraí pearsanta a aistriú ón Stát chuig áit den sórt sin.
(b) I mír (a) den fho-alt seo ciallaíonn “faisnéis” faisnéis (nach sonraí í) a bhaineann le duine aonair beo is féidir a aithint ón bhfaisnéis sin.
(13) Beidh duine ciontach i gcion má mhainníonn nó má dhiúltaíonn sé, gan leithscéal réasúnach, toirmeasc a bheidh sonraithe i bhfógra toirmisc a chomhlíonadh.
Cumhacht chun a cheangal faisnéis a thabhairt.
12.—(1) Féadfaidh an Coimisinéir, trí fhógra i scríbhinn (dá ngairtear fógra faisnéise san Acht seo) a sheirbheálfar ar dhuine, a cheangal ar an duine cibé faisnéis, i ndáil le nithe a bheidh sonraithe san fhógra, is gá nó is fóirsteanach chun go gcomhlíonfaidh an Coimisinéir a chuid feidhmeanna, a thabhairt dó i scríbhinn laistigh de cibé am a shonrófar san fhógra.
(2) Faoi réir fho-alt (3) den alt seo—
(a) luafar i bhfógra faisnéise go bhféadfaidh an duine lena mbaineann, laistigh de 21 lá ón lá a sheirbheálfar an fógra air, achomharc a dhéanamh chuig an gCúirt faoi alt 26 den Acht seo in aghaidh an cheanglais a bheidh sonraithe san fhógra, agus
(b) maidir leis an am a bheidh sonraithe san fhógra chun ceanglas a shonraítear ann a chomhlíonadh, ní bheidh sé sainráite go rachaidh sé in éag roimh dheireadh na tréimhse 21 lá a shonraítear i mír (a) den fho-alt seo, agus, má thionscnaítear achomharc in aghaidh an cheanglais, ní gá an ceanglas a chomhlíonadh agus ní bheidh feidhm ag fo-alt (5) den alt seo i ndáil leis an gcéanna, go dtí go ndéanfar an t-achomharc a chinneadh nó a tharraingt siar.
(3) Más rud é, i gcás an Choimisinéara—
(a) go mbeidh sé, de bharr imthosca speisialta, den tuairim gur cheart ceanglas a bheidh sonraithe i bhfógra faisnéise a chomhlíonadh go práinneach, agus
(b) go gcuirfidh sé ráiteas á rá sin san fhógra,
ní bheidh feidhm ag fo-alt (2) den alt seo i ndáil leis an bhfógra, ach beidh ráiteas san fhógra faoi éifeacht fhorálacha alt 26 (seachas fo-alt (3)) den Acht seo agus ní cheanglófar leis an ceanglas a chomhlíonadh roimh dheireadh na tréimhse 7 lá dar tosach an dáta ar a seirbheálfar an fógra.
(4) (a) Aon achtachán nó riail dlí a thoirmisceann nó a shrianann faisnéis a nochtadh, ní chuirfidh sé bac ar dhuine aon fhaisnéis a thabhairt don Choimisinéir is gá nó is fóirsteanach chun go gcomhlíonfaidh an Coimisinéir a chuid feidhmeanna.
(b) Ní bheidh feidhm ag mír (a) den fho-alt seo maidir le faisnéis ar faisnéis í, i dtuairim an Aire nó an Aire Cosanta, a choimeádtar nó a coimeádadh tráth ar bith chun slándáil an Stáit a chosaint nó le faisnéis atá faoi phribhléid ó thaobh nochtadh in imeachtaí in aon chúirt.
(5) Aon duine a mhainneoidh nó a dhiúltóidh, gan leithscéal réasúnach, ceanglas a shonraítear i bhfógra faisnéise a chomhlíonadh nó a dhéanfaidh, mar chomhlíonadh airbheartaithe ar an gceanglas sin, faisnéis a thabhairt don Choimisinéir is eol don duine a bheith bréagach nó míthreorach ar phonc ábhartha, beidh sé ciontach i gcion.
Cóid chleachtais.
13.—(1) Spreagfaidh an Coimisinéir comhlachais thrádála agus comhlachtaí eile, a fheidhmíonn ar son aicmí rialaitheoirí sonraí, chun cóid chleachtais a ullmhú nach mór do na haicmí sin a chomhlíonadh agus iad ag déileáil le sonraí pearsanta.
(2) Féadfaidh an Coimisinéir aon chód cleachtais a ullmhaíodh amhlaidh (dá ngairtear cód ina dhiaidh seo san alt seo) a cheadú más é a thuairim go ndéanann sé, maidir leis na hábhair shonraí i gceist, riar cosanta a sholáthar dóibh, i dtaca le sonraí pearsanta a bhaineann leo, a bheidh de réir an riar cosanta dá bhforáiltear le hailt 2, 3, 4 (seachas fo-alt (8)) agus 6 den Acht seo agus cuideoidh sé le leathadh an chóid sin i measc na rialaitheoirí sonraí lena mbaineann.
(3) Féadfaidh an tAire aon chód den sórt sin a bheidh ceadaithe amhlaidh a leagan faoi bhráid gach Tí den Oireachtas agus má dhéanann gach Teach acu sin rún a rith á cheadú, ansin—
(a) a mhéid a bhaineann sé le déileáil le sonraí pearsanta ag na haicmí rialaitheoirí sonraí lena mbaineann—
(i) beidh feidhm dlí aige de réir a théarmaí, agus
(ii) déanfar, ar a thosach feidhme, tagairtí (cibé acu sonrach nó ginearálta) san Acht seo d'aon fhoráil d'fhorálacha na n-alt sin a fhorléiriú (nó, más cód é in ionad cóid a bhfuil feidhm dlí aige de bhua an fho-ailt seo, leanfar dá bhforléiriú) amhail is dá mba thagairtí iad freisin d'fhorálacha iomchuí an chóid a bhfuil feidhm dlí aige de thuras na huaire,
agus
(b) measfar gur ionstraim reachtúil é lena mbaineann an tAcht Ionstraimí Reachtúla, 1947, go príomha.
(4) Beidh feidhm ag an alt seo i ndáil le próiseálaithe sonraí amhail mar atá feidhm aige i ndáil le haicmí rialaitheoirí sonraí, fara an mhodhnaithe go bhforléireofar na tagairtí san alt seo do na hailt sin mar thagairtí d'alt 2 (1) (d) den Acht seo agus fara aon mhodhnuithe eile is gá.
Tuarascáil bhliantúil.
14.—(1) Ullmhóidh an Coimisinéir gach bliain tar éis na bliana ina gceapfar an chéad Choimisinéir, tuarascáil i ndáil lena ghníomhaíochtaí faoin Acht seo don bhliain roimhe sin agus cuirfidh sé faoi deara cóipeanna den tuarascáil a leagan faoi bhráid gach Tí den Oireachtas.
(2) D'ainneoin fho-alt (1) den alt seo, dá mba rud é, murach an fo-alt seo, go mbainfeadh an chéad tuarascáil faoin bhfo-alt sin le tréimhse is giorra ná 6 mhí, bainfidh an tuarascáil leis an tréimhse sin agus leis an mbliain díreach i ndiaidh na tréimhse sin agus ullmhófar é a luaithe is féidir tar éis dheireadh na bliana sin.
Cúnamh frithpháirteach idir na páirtithe sa Choinbhinsiún.
15.—(1) Déantar leis seo an Coimisinéir a ainmniú chun críocha Chaibidil IV (a bhaineann le cúnamh frithpháirteach) den Choinbhinsiún.
(2) Féadfaidh an tAire aon rialacháin a dhéanamh a mheasann sé is gá nó is fóirsteanach chun a chumasú don Chaibidil sin IV lánéifeacht a bheith aici.
Clárú
An clár.
16.—(1) Tá feidhm ag an alt seo maidir leis na daoine seo a leanas, is é sin le rá:
(a) rialaitheoirí sonraí, is údaráis phoiblí agus comhlachtaí agus daoine eile dá dtagraítear sa Tríú Sceideal a ghabhann leis an Acht seo,
(b) rialaitheoirí sonraí, is forais airgeadais, daoine ag a bhfuil údaruithe faoi Rialacháin na gComhphobal Eorpach (Árachas Neamh-Shaoil), 1976 (I.R. Uimh. 115 de 1976), nó faoi Rialacháin na gComhphobal Eorpach (Árachas Saoil), 1984 (I.R. Uimh. 57 de 1984) nó daoine arb é atá ina ngnó go hiomlán nó go formhór dírmhargaíocht, teistiméireachtaí creidmheasa a chur ar fáil nó fiacha a bhailiú,
(c) aon rialaitheoirí sonraí eile a choimeádann sonraí pearsanta a bhaineann le—
(i) bunadh cine,
(ii) tuairimí polaitíochta nó tuairimí creidimh nó tuairimí eile,
(iii) sláinte coirp nó meabhrach (seachas aon sonraí den sórt sin a choimeádann siad go réasúnach i ndáil le sláinte coirp nó meabhrach a gcuid fostaithe mar ghnáthriarachán pearsanra agus nach n-úsáidtear ná nach nochtar chun aon chríche eile),
(iv) cleachtadh gnéis, nó
(v) ciontuithe coiriúla,
(d) próiseálaithe sonraí arb é atá ina ngnó go hiomlán nó go páirteach sonraí pearsanta a phróiseáil thar ceann rialaitheoirí sonraí, agus
(e) cibé aicmí rialaitheoirí sonraí agus próiseálaithe sonraí a bheidh arna bhforordú de thuras na huaire (ar aicmí iad a bhféadfar a áireamh iontu rialaitheoirí sonraí agus próiseálaithe sonraí nach mbeadh feidhm ag an alt seo maidir leo thairis sin agus ar ar seirbheáladh fógraí for fheidhmithe, fógraí toirmisc nó fógraí faisnéise i gcás na fógraí a bheith i bhfeidhm agus an t-am chun achomharc a thionscnamh ina n-aghaidh faoi alt 26 den Acht seo a bheith imithe in éag gan an t-achomharc sin a bheith tionscanta nó aon achomharc den sórt sin a bheith tarraingthe siar).
(2) Bunóidh agus cothabhálfaidh an Coimisinéir clár (dá ngairtear an clár san Acht seo) de dhaoine lena mbaineann an t-alt seo agus déanfaidh sé, de réir mar is iomchuí, taifead nó taifid sa chlár i leith gach duine a nglacfaidh an Coimisinéir lena iarratas ar chlárú sa chlár.
(3) (a) Féadfaidh comhaltaí den phobal an clár a iniúchadh saor in aisce gach tráth réasúnach agus féadfaidh siad cóipeanna a dhéanamh de thaifid sa chlár nó de shleachta as na taifid sin.
(b) Féadfaidh comhalta den phobal, ar cibé táille (más ann) a bheidh forordaithe a íoc leis an gCoimisinéir, cóip (a mbeidh sé deimhnithe ag an gCoimisinéir nó ag duine dá fhoireann gur cóip dhílis í) d'aon taifead sa chlár, nó de shliocht as aon taifead sa chlár, a fháil ón gCoimisinéir.
(c) In aon imeachtaí—
(i) beidh cóip de thaifead, nó de shliocht as taifead, sa chlár, a mbeidh sé deimhnithe ag an gCoimisinéir nó ag duine dá fhoireann gur cóip dhílis í, ina fianaise ar an taifead nó ar an sliocht, agus
(ii) measfar, maidir le doiciméad a airbheartaíonn gur cóip den sórt sin é agus go bhfuil sé deimhnithe mar a dúradh, gur cóip den sórt sin é agus go bhfuil sé deimhnithe amhlaidh mura gcruthófar a mhalairt.
(d) In aon imeachtaí—
(i) beidh deimhniú, a bheidh sínithe ag an gCoimisinéir nó ag duine dá fhoireann, ina mbeidh sé luaite nach bhfuil aon taifead sa chlár maidir le duine sonraithe mar rialaitheoir sonraí nó mar phróiseálaí sonraí, ina fhianaise ar an bhfíoras sin, agus.
(ii) measfar, maidir le doiciméad a airbheartaíonn gur deimhniú den sórt sin é agus go bhfuil sé sínithe mar a dúradh, gur deimhniú den sórt sin é agus go bhfuil sé sínithe amhlaidh mura gcruthófar a mhalairt.
Iarratais ar chlárú.
17.—(1) (a) Duine ar mian leis a bheith cláraithe sa chlár nó clárú a choimeád i bhfeidhm faoi alt 18 den Acht seo nó na sonraí i dtaifead sa chlár a athrú, déanfaidh sé iarratas i scríbhinn chuige sin chuig an gCoimisinéir agus tabharfaidh sé dó cibé faisnéis a bheidh forordaithe agus aon fhaisnéis eile a theastóidh uaidh.
(b) Má bheartaíonn rialaitheoir sonraí pearsanta a choimeád le haghaidh dhá chríoch nó níos mó, féadfaidh sé iarratas a dhéanamh ar chlárú ar leith maidir le haon cheann de na críocha sin agus, faoi réir fhorálacha an Achta seo, déanfar taifid sa chlár de réir aon iarratas den sórt sin.
(2) Faoi réir fho-alt (3) den alt seo, glacfaidh an Coimisinéir le hiarratas ar chlárú, a dhéanfar ar an tslí fhorordaithe agus a mbeidh cibé táille a bheidh forordaithe íoctha ina leith, ó dhuine lena mbaineann alt 16 den Acht seo murab é a thuairim—
(a) nach leor na sonraí a bheartaítear a áireamh i dtaifead sa chlár nó nár tugadh nó nach leor aon fhaisnéis eile a theastóidh ón gCoimisinéir, nó
(b) gur dóigh go sáróidh an duine atá ag déanamh iarratas ar chlárú aon fhoráil d'fhorálacha an Achta seo.
(3) Ní ghlacfaidh an Coimisinéir le hiarratas den sórt sin ar chlárú ó rialaitheoir sonraí a choimeádann sonraí pearsanta a shonraítear in alt 16 (1) (c) den Acht seo murab é a thuairim go bhfuil cosaintí iomchuí á soláthar aige chun príobháideacht na n-ábhar sonraí lena mbaineann a chosaint agus go leanfaidh sé dá soláthar.
(4) Má dhiúltaíonn an Coimisinéir d'iarratas ar chlárú, tabharfaidh sé fógra i scríbhinn faoin diúltú a luaithe is féidir, don duine atá ag déanamh iarratas ar chlárú, agus maidir leis an bhfógra—
(a) sonrófar ann na cúiseanna a bhí leis an diúltú, agus
(b) luafar ann go bhféadfaidh an duine, laistigh de 21 lá ón lá a bhfaighidh sé an fógra, achomharc a dhéanamh chun na Cúirte faoi alt 26 den Acht seo in aghaidh an diúltaithe.
(5) Más rud é—
(a) gurb é tuairim an Choimisinéara, de bharr imthosca speisialta, gur cheart go dtiocfadh diúltú ar iarratas ar chlárú in éifeacht go práinneach, agus
(b) go mbeidh san fhógra faoin diúltú ráiteas dá réir sin agus ráiteas faoi éifeacht fhorálacha alt 26 (seachas fo-alt (3)) den Acht seo,
ní bheidh feidhm ag mír (b) d'fho-alt (4) den alt seo i ndáil leis an bhfógra agus forléireofar mír (b) d'fho-alt (6) den alt seo, agus beidh éifeacht léi, amhail is dá gcuirfí “7 lá dar tosach an dáta ar a bhfuarthas an fógra” in ionad na bhfocal ó “21 lá”, agus na focail sin san áireamh, go dtí deireadh na míre.
(6) Faoi réir fho-alt (5) den alt seo, aon duine a bhfuil iarratas ar chlárú déanta aige déileálfar leis, chun críocha alt 19 den Acht seo,—
(a) go dtí go gcuirfear in iúl dó gur glacadh leis an iarratas nó go dtí go dtarraingeofar siar é, nó
(b) i gcás go gcuirtear in iúl dó gur diúltaíodh don iarratas, go dtí deireadh na tréimhse 21 lá ar féidir achomharc a thionscnamh laistigh di faoi alt 26 den Acht seo in aghaidh an diúltaithe, agus má thionscnaítear an t-achomharc sin, go dtí go gcinnfear nó go dtarraingeofar siar an t-achomharc,
ionann is dá mbeadh glactha leis an iarratas agus dá mbeadh na sonraí ann ar áireamh i dtaifead sa chlár ar an dáta a ndearnadh an t-iarratas.
(7) Beidh feidhm ag fo-ailt (2) go (6) den alt seo, fara aon mhodhnuithe is gá, maidir le hiarratas ar chlárú a choimeád i bhfeidhm agus le hiarratas ar athrú a dhéanamh sna mionsonraí i dtaifead sa chlár mar atá feidhm acu maidir le hiarratas ar chlárú.
Ré an chláraithe agus clárú a choimeád i bhfeidhm.
18.—(1) Mairfidh clárú (cibé acu arb é an chéad chlárú nó clárú a choimeádtar i bhfeidhm faoin alt seo é) ar feadh na tréimhse forordaithe agus ar dhul in éag don tréimhse sin bainfear an taifead iomchuí den chlár mura gcoimeádtar an clárú i bhfeidhm mar a dúradh.
(2) Déanfar an tréimhse fhorordaithe (nach lú ná bliain amháin) a ríomh—
(a) i gcás an chéad chlárú, ón dáta a ndearnadh an taifead iomchuí sa chlár, agus
(b) i gcás clárú a coimeádadh i bhfeidhm faoin alt seo, ón dáta ar coimeádadh i bhfeidhm amhlaidh é.
(3) Coimeádfaidh an Coimisinéir, faoi réir fhorálacha an Achta seo, clárú i bhfeidhm, cibé acu ar coimeádadh i bhfeidhm roimhe sin é faoin alt seo nó nár coimeádadh.
(4) D'ainneoin na bhforálacha roimhe seo den alt seo, féadfaidh an Coimisinéir tráth ar bith, ar iarraidh ón duine lena mbaineann taifead, an taifead a bhaint den chlár.
Éifeacht cláraithe.
19.—(1) Ní dhéanfaidh rialaitheoir sonraí lena mbaineann alt 16 den Acht seo sonraí pearsanta a choimeád mura bhfuil, de thuras na huaire, taifead sa chlár maidir leis.
(2) Maidir le rialaitheoir sonraí a bhfuil taifead sa chlár maidir leis—
(a) ní choimeádfaidh sé sonraí pearsanta d'aon tuairisc seachas sonraí den tuairisc a shonraítear sa taifead,
(b) ní choimeádfaidh ná ní úsáidfidh sé sonraí pearsanta chun críche ar bith seachas an chríoch nó na críocha a thuairiscítear sa taifead,
(c) má cheanglaítear an fhoinse, óna bhfaightear na sonraí sin agus aon fhaisnéis a bheartaítear a áireamh sna sonraí sin, a thuairisciú sa taifead, ní bhfaighidh sé na sonraí nó an fhaisnéis sin ó fhoinse nach dtuairiscítear amhlaidh,
(d) ní nochtfaidh sé na sonraí sin do dhuine nach bhfuil tuairisc air sa taifead (seachas duine a bhféadfar na sonraí sin a nochtadh dó sna himthosca a shonraítear in alt 8 den Acht seo),
(e) ní aistreoidh sé na sonraí sin go díreach ná go hindíreach chuig áit lasmuigh den Stát seachas áit a ainmnítear nó a thuairiscítear sa taifead.
(3) Beidh fostaí nó gníomhaire (nach próiseálaí sonraí) de chuid rialaitheora sonraí a luaitear i bhfo-alt (2) den alt seo, maidir le sonraí pearsanta a choimeádann nó, de réir mar a bheidh, a choimeádfaidh an rialaitheoir sonraí, faoi réir na srianta céanna i ndáil le húsáid, foinse, nochtadh nó aistriú na sonraí leis na srianta sin a mbeidh an rialaitheoir sonraí faoina réir faoin bhfo-alt sin.
(4) Ní dhéanfaidh próiseálaí sonraí lena mbaineann alt 16 sonraí pearsanta a phróiseáil mura bhfuil, de thuras na huaire, taifead sa chlár maidir leis.
(5) Más rud é go n-athraíonn agus aon uair a athraíonn duine, a bhfuil taifead maidir leis sa chlár, a sheoladh, cuirfidh sé, air sin, an t-athrú in iúl don Choimisinéir.
(6) Aon duine a sháraíonn fo-alt (1), (4) nó (5) den alt seo, nó a sháraíonn go feasach aon fhoráil eile den alt seo, beidh sé ciontach i gcion.
Rialacháin le haghaidh clárú.
20.—(1) Féadfar na nithe seo a leanas, agus cibé nithe eile (más ann) is gá nó is fóirsteanach chun go bhféadfaidh lánéifeacht a bheith ag ailt 16 go 19 den Acht seo, a fhorordú:
(a) an nós imeachta a bheidh le leanúint i ndáil le hiarratais ó dhaoine ar chlárú a dhéanamh, ar chlárú a choimeád i bhfeidhm nó ar na mionsonraí a athrú i dtaifead sa chlár nó ar na hiarratais sin a tharraingt siar,
(b) an fhaisnéis a cheanglaítear ar na daoine sin a thabhairt don Choimisinéir, agus
(c) na mionsonraí a áireofar i dtaifid sa chlár,
agus féadfar foráil éagsúil a dhéanamh i ndáil leis na nithe a dúradh maidir le haicmí éagsúla daoine.
(2) Duine a dhéanfaidh, mar chomhlíonadh airbheartaithe ar cheanglas a fhorordaítear faoin alt seo, faisnéis a thabhairt don Choimisinéir is eol don duine a bheith bréagach nó míthreorach ar phonc ábhartha, beidh sé ciontach i gcion.
Ilghnéitheach
Nochtadh neamhúdaraithe ag próiseálaí sonraí.
21.—(1) Ní dhéanfaidh próiseálaí sonraí ná fostaí ná gníomhaire dá chuid sonraí pearsanta a phróiseálfaidh sé a nochtadh gan údarás roimh ré ón rialaitheoir sonraí ar thar a cheann a bheidh na sonraí á bpróiseáil.
(2) Beidh duine a sháróidh go feasach fo-alt (1) den alt seo ciontach i gcion.
Sonraí pearsanta a fuarthas gan údarás a nochtadh.
22.—(1) Maidir le duine—
(a) a fhaigheann rochtain ar shonraí pearsanta, nó a fhaigheann aon fhaisnéis arb í atá sna sonraí sin, gan údarás roimh ré ón rialaitheoir sonraí nó ón bpróiseálaí sonraí a bhfuil na sonraí á gcoimeád aige, agus
(b) a nochtann na sonraí nó an fhaisnéis do dhuine eile,
beidh sé ciontach i gcion.
(2) Ní bheidh feidhm ag fo-alt (1) den alt seo maidir le duine ar fostaí nó gníomhaire de chuid an rialaitheora sonraí nó de chuid an phróiseálaí sonraí lena mbaineann é.
Forálacha i ndáil le neamhchónaitheoirí áirithe agus le sonraí a choimeádtar nó a phróiseáiltear lasmuigh den Stát.
23.—(1) Faoi réir fhorálacha an ailt seo níl feidhm ag an Acht seo maidir le rialaitheoir sonraí i leith sonraí a choimeádtar lasmuigh den Stát ná maidir le próiseálaí sonraí i leith sonraí a phróiseáiltear lasmuigh den Stát.
(2) Chun críocha an ailt seo, measfar maidir le sonraí—
(a) go gcoimeádann rialaitheoir sonraí na sonraí sin san áit ina rialaíonn sé a n-inneachar agus a n-úsáid, agus
(b) go bpróiseálann próiseálaí sonraí na sonraí sin san áit ina bhfuil an trealamh sonraí iomchuí suite.
(3) I gcás go rialaíonn duine nach cónaitheoir sa Stát inneachar agus úsáid sonraí pearsanta a choimeádtar laistigh den Stát nó go bpróiseálann sé aon sonraí den sórt sin trí fhostaí nó gníomhaire sa Stát, beidh feidhm ag an Acht seo amhail is dá ndéanfaí an rialú sin a fheidhmiú nó, de réir mar a bheidh, na sonraí a phróiseáil ag an bhfostaí nó ag an ngníomhaire ag gníomhú dó ar a shon féin.
(4) Níl feidhm ag an Acht seo maidir le sonraí a phróiseáiltear go hiomlán lasmuigh den Stát mura n-úsáidtear na sonraí nó mura mbeartaítear iad a úsáid sa Stát.
(5) Níl feidhm ag alt 19 (2) (e) den Acht seo maidir le sonraí a aistriú atá lasmuigh den Stát cheana féin.
Cumhachtaí oifigeach údaraithe.
24.—(1) San alt seo ciallaíonn “oifigeach údaraithe” duine atá údaraithe i scríbhinn ag an gCoimisinéir chun na cumhachtaí a thugtar leis an alt seo a fheidhmiú chun críocha an Achta seo.
(2) Féadfaidh oifigeach údaraithe, chun aon fhaisnéis a fháil is gá nó is fóirsteanach chun go gcomhlíonfaidh an Coimisinéir a chuid feidhmeanna, ar údarú an oifigigh a thabhairt ar aird, má éilítear amhlaidh—
(a) gach tráth réasúnach, dul isteach in áitreabh a chreideann sé go réasúnach a bheith áitithe ag rialaitheoir sonraí nó ag próiseálaí sonraí, an t-áitreabh agus aon sonraí atá ann (seachas sonraí arb é atá iontu faisnéis a shonraítear in alt 12 (4) (b) den Acht seo) a iniúchadh agus aon trealamh sonraí atá ann a iniúchadh, a scrúdú, a oibriú agus a thástáil,
(b) a cheangal ar aon duine ar an áitreabh, ar rialaitheoir sonraí, próiseálaí sonraí nó fostaí de cheachtar acu é, aon sonraí den sórt sin a nochtadh don oifigeach agus aon sonra-ábhar (seachas sonra-ábhar arb é atá ann faisnéis a shonraítear amhlaidh) a thabhairt ar aird dó atá faoi chumhacht an duine sin nó faoina rialú agus cibé faisnéis a thabhairt dó a theastóidh uaidh go réasúnach maidir leis na sonraí sin agus leis an ábhar sin,
(c) ar an áitreabh nó in áit eile, na sonraí sin a iniúchadh agus a chóipeáil nó faisnéis a bhaint amach astu nó an t-ábhar sin a iniúchadh agus a chóipeáil nó sleachta a thógáil as, agus
(d) a cheangal ar aon duine a luaitear i mír (b) den fho-alt seo cibé faisnéis a thabhairt don oifigeach a theastóidh uaidh go réasúnach maidir leis na nósanna imeachta a mbaintear leas astu chun forálacha an Achta seo a chomhlíonadh, na foinsí óna bhfaightear na sonraí sin, na críocha dá gcoimeádtar iad, na daoine dá nochtar iad agus an trealamh sonraí san áitreabh.
(3) Faoi réir fho-alt (5) den alt seo, ní bheidh feidhm ag fo-alt (2) den alt seo i ndáil le foras airgeadais.
(4) Aon uair a mheasann an Coimisinéir gur gá nó gur fóirsteanach, chun a chuid feidhmeanna a chomhlíonadh, go bhfeidhmeodh oifigeach údaraithe, i ndáil le foras airgeadais, na cumhachtaí a thugtar le fo-alt (2) den alt seo, féadfaidh an Coimisinéir iarratas a dhéanamh chuig an Ard-Chúirt ar ordú faoin alt seo.
(5) Aon uair is deimhin leis an Ard-Chúirt, ar iarratas chuici faoi fho-alt (4) den alt seo, go bhfuil sé réasúnach déanamh amhlaidh agus gur deimhin léi gur gá sin ar mhaithe le leas an phobail, féadfaidh sí ordú a dhéanamh á údarú d'oifigeach údaraithe na cumhachtaí a thugtar le fo-alt (2) den alt seo a fheidhmiú i ndáil leis an bhforas airgeadais lena mbaineann, faoi réir cibé coinníollacha (más ann) is cuí léi agus a shonróidh sí san ordú.
(6) Duine a bhacfaidh nó a choiscfidh oifigeach údaraithe agus é ag feidhmiú cumhachta faoin alt seo nó, gan leithscéal réasúnach, nach ndéanfaidh de réir ceanglais faoin alt seo, nó a dhéanfaidh, mar chomhlíonadh airbheartaithe ar cheanglas den sórt sin, faisnéis a thabhairt d'oifigeach údaraithe is eol don duine a bheith bréagach nó míthreorach ar phonc ábhartha, beidh sé ciontach i gcion.
Fógraí a sheirbheáil.
25.—Aon fhógra a údaraíonn an tAcht seo don Choimisinéir a sheirbheáil ar dhuine, féadfar é a sheirbheáil—
(a) más duine aonair an duine—
(i) trína sheachadadh air, nó
(ii) trína chur chuige leis an bpost agus é dírithe chuige ag a ghnáth-áit chónaithe nó ghnó nó ag an áit chónaithe nó ghnó is déanaí is eol a bheith aige, nó
(iii) trína fhágáil dó ag an áit sin,
(b) más comhlacht corpraithe nó comhlacht neamhchorpraithe daoine an duine, trína chur chuig an gcomhlacht leis an bpost chuig a oifig chláraithe (de réir bhrí Acht na gCuideachtaí, 1963), nó trína dhíriú chuig an oifig sin agus é a fhágáil inti, i gcás cuideachta, agus trína chur leis an bpost chuig a phríomháit ghnó nó trína dhíriú chuici agus a fhágáil ann, in aon chás eile.
Achomhairc chun na Cúirte Cuarda.
26.—(1) Féadfar achomharc a dhéanamh chun na Cúirte, agus féadfaidh an Chúirt achomharc a éisteacht agus a chinneadh—
(a) in aghaidh ceanglais a shonraítear i bhfógra forfheidhmithe nó i bhfógra faisnéise,
(b) in aghaidh toirmisc a shonraítear i bhfógra toirmisc,
(c) in aghaidh diúltú ón gCoimisinéir faoi alt 17 den Acht seo, a chuir sé in iúl faoin alt sin, agus
(d) in aghaidh cinnidh ón gCoimisinéir i ndáil le gearán faoi alt 10 (1) (a) den Acht seo,
agus tionscnófar achomharc den sórt sin laistigh de 21 lá ón lá a ndéanfar an fógra iomchuí a sheirbheáil ar an duine lena mbaineann nó, de réir mar a bheidh, ón lá a bhfaighidh an duine sin fógra faoin diúltú nó faoin gcinneadh iomchuí.
(2) Déanfaidh breitheamh a bheidh sannta de thuras na huaire don chuaird ina bhfuil gnáthchónaí ar an achomharcóir nó ina seolann sé aon ghairm, gnó nó slí bheatha an dlínse a thugtar don Chúirt leis an Acht seo a fheidhmiú nó, de réir rogha an achomharcóra, déanfaidh breitheamh den Chúirt a bheidh sannta de thuras na huaire do chuaird Bhaile Atha Cliath í a fheidhmiú.
(3) (a) Faoi réir mhír (b) den fho-alt seo, is cinneadh críochnaitheach cinneadh na Cúirte faoin alt seo.
(b) Féadfar achomharc a thionscnamh san Ard-Chúirt ar phonc dlí in aghaidh cinnidh den sórt sin; agus forléireofar tagairtí san Acht seo do chinneadh achomhairc mar thagairtí a fholaíonn tagairtí do chinneadh aon achomhairc den sórt sin chun na hArd-Chúirte nó do chinneadh aon achomhairc in aghaidh bhreith na Cúirte sin.
(4) Más rud é—
(a) go ndéanfaidh duine achomharc chun na Cúirte de bhun mhír (a), (b) nó (c) d'fho-alt (1) den alt seo,
(b) go dtionscnófar an t-achomharc laistigh den tréimhse a shonraítear san fhógra nó sa scéala a luaitear i mír (c) den fho-alt seo, agus
(c) gur chuir an Coimisinéir ráiteas san fhógra nó sa scéala iomchuí á rá gur dóigh leis, de bharr imthosca speisialta, gur cheart an ceanglas nó an toirmeasc a shonraítear san fhógra a chomhlíonadh, nó gur cheart don diúltú a shonraítear sa scéala teacht in éifeacht, go práinneach,
ansin, d'ainneoin aon fhorála den Acht seo, má chinneann an Chúirt amhlaidh ar iarratas chuici chuige sin, ní cion a bheidh ann murar chomhlíon an duine ceanglas nó toirmeasc a shonraítear san fhógra nó, de réir mar a bheidh, má sháraigh sé alt 19 den Acht seo, le linn na tréimhse dar críoch cinneadh nó tarraingt siar an achomhairc nó le linn cibé tréimhse eile a chinnfear mar a dúradh.
Fianaise in imeachtaí.
27.—(1) In aon imeachtaí—
(a) beidh deimhniú arna shíniú ag an Aire nó ag an Aire Cosanta á rá gurb é a thuairim go gcoimeádtar sonraí pearsanta nó gur coimeádadh iad tráth ar bith chun slándáil an Stáit a chosaint ina fhianaise ar an tuairim sin,
(b) beidh deimhniú—
(i) a bheidh sínithe ag comhalta den Gharda Síochána nach mbeidh faoi bhun chéim ard-cheannfoirt nó ag oifigeach de na Buan-Óglaigh ag a bhfuil céim airm nach bhfuil faoi bhun coirnéil agus a bheidh ainmnithe ag an Aire Cosanta faoi alt 8 (a) den Acht seo, agus
(ii) a luann gurb é tuairim an chomhalta nó, de réir mar a bheidh, an oifigigh gur gá sonraí pearsanta a nochtadh chun na críche a dúradh,
ina fhianaise ar an tuairim sin, agus
(c) measfar, maidir le doiciméad a airbheartaíonn gur deimhniú é faoi mhír (a) nó (b) den fho-alt seo agus go bhfuil sé sínithe ag duine a shonraítear sa mhír sin (a) nó (b), de réir mar is iomchuí, gur deimhniú den sórt sin é agus go bhfuil sé sínithe amhlaidh mura gcruthófar a mhalairt.
(2) Ní bheidh faisnéis a sholáthróidh duine mar chomhlíonadh ar iarraidh faoi alt 3 nó 4 (1) den Acht seo, ar cheanglas faoin Acht seo nó ar ordú ó chúirt in imeachtaí faoin Acht seo, inghlactha i bhfianaise ina aghaidh ná in aghaidh a chéile in imeachtaí i leith ciona faoin Acht seo.
Imeachtaí a éisteacht.
28.—Féadfar, de rogha na cúirte, na himeachtaí go léir nó aon chuid d'aon imeachtaí faoin Acht seo, a éisteacht ar shlí seachas go poiblí.
Cionta ag stiúrthóirí, etc., de chuid comhlachtaí corpraithe.
29.—(1) I gcás cion faoin Acht seo a bheith déanta ag comhlacht corpraithe agus go gcruthófar go ndearnadh é le toiliú nó le cúlcheadú, nó go raibh sé inchurtha i leith aon fhaillí ar thaobh, duine is stiúrthóir, bainisteoir, rúnaí nó oifigeach eile den chomhlacht corpraithe sin nó duine a d'airbheartaigh a bheith ag gníomhú in aon cháil den sórt sin, beidh an duine sin, chomh mhaith leis an gcomhlacht corpraithe, ciontach sa chion sin agus dlífear imeachtaí a thionscnamh ina choinne agus é a phionósú dá réir sin.
(2) I gcás gnóthaí comhlachta chorpraithe a bheith á mbainistiú ag a chuid comhaltaí, beidh feidhm ag fo-alt (1) den alt seo i ndáil le gníomhartha agus mainneachtana comhalta i ndáil lena chuid feidhmeanna bainisteoireachta amhail is dá mba stiúrthóir nó bainisteoir ar an gcomhlacht corpraithe é.
An Coimisinéir d'ionchúiseamh cionta achoimre.
30.—(1) Féadfaidh an Coimisinéir imeachtaí achoimre i leith ciona faoin Acht seo a thabhairt ar aghaidh agus a ionchúiseamh.
(2) D'ainneoin alt 10 (4) den Petty Sessions (Ireland) Act, 1851, féadfar imeachtaí achoimre i leith ciona faoin Acht seo a thionscnamh laistigh de bhliain amháin ó dháta an chiona.
Pionóis.
31.—(1) Duine a bheidh ciontach i gcion faoin Acht seo dlífear—
(a) ar é a chiontú go hachomair, fíneáil nach mó ná £1,000 a chur air, nó
(b) ar é a chiontú ar díotáil, fíneáil nach mó ná £50,000 a chur air.
(2) I gcás go gciontófar duine i gcion faoin Acht seo, féadfaidh an chúirt a ordú go ndéanfar aon sonra-ábhar ar dóigh leis an gcúirt baint a bheith aige le déanamh an chiona a fhorghéilleadh nó a mhilleadh agus aon sonraí iomchuí a scriosadh.
(3) Ní dhéanfaidh an chúirt ordú faoi fho-alt (2) den alt seo i ndáil le sonra-ábhar nó le sonraí i gcás go measann sí go mb'fhéidir gur duine éigin seachas an duine a ciontaíodh sa chion áirithe úinéir na sonraí, nó go bhféadfadh leas a bheith aige ar shlí eile sna sonraí, mura ndéanfar cibé bearta is indéanta go réasúnach chun scéala a thabhairt don duine sin, agus chun deis a thabhairt dó cúis a shuíomh nár cheart an t-ordú a dhéanamh.
(4) Beidh feidhm ag alt 13 den Acht um Nós Imeachta Coiriúil, 1967, i ndáil le cion faoin Acht seo nach bhfuil á ionchúiseamh go hachomair ionann is dá mba rud é, in ionad na bpionós dá bhforáiltear i bhfo-alt (3) (a) den alt sin, gur sonraíodh ann an fhíneáil dá bhforáiltear i bhfo-alt (1) (a) den alt seo agus déanfar an tagairt i bhfo-alt (2) (a) den alt sin 13 do na pionóis dá bhforáiltear le fo-alt (3) a fhorléiriú, agus beidh éifeacht léi, dá réir sin.
Rialacháin a leagan faoi bhráid Thithe an Oireachtais.
32.—Gach rialachán a dhéanfar faoin Acht seo (seachas alt 2) leagfar é faoi bhráid gach Tí den Oireachtas a luaithe is féidir tar éis a dhéanta agus má dhéanann ceachtar Teach acu sin, laistigh den 21 lá a shuífidh an Teach sin tar éis an rialachán a leagan faoina bhráid, rún a rith ag neamhniú an rialacháin, beidh an rialachán ar neamhní dá réir sin, ach sin gan dochar do bhailíocht aon ní a rinneadh roimhe sin faoin rialachán.
Táillí.
33.—(1) Déanfar na táillí faoin Acht seo a íoc isteach sa Státchiste nó a dhiúscairt chun tairbhe don Státchiste de réir ordachán ón Aire Airgeadais.
(2) Ní bhainfidh an Public Offices Fees Act, 1879, le haon táillí faoin Acht seo.
Caiteachais an Aire.
34.—Déanfar na caiteachais a thabhóidh an tAire ag riaradh an Achta seo a íoc, a mhéid a cheadóidh an tAire Airgeadais, as airgead a sholáthróidh an tOireachtas.
Gearrtheideal agus tosach feidhme.
35.—(1) Féadfar an tAcht um Chosaint Sonraí, 1988, a ghairm den Acht seo.
(2) Tiocfaidh an tAcht seo i ngníomh cibé lá nó laethanta a shocrófar chuige sin le hordú nó le horduithe ón Aire faoin alt seo, go ginearálta nó faoi threoir aon chríche nó forála áirithe, agus féadfar laethanta éagsúla a shocrú amhlaidh chun críocha éagsúla agus le haghaidh forálacha éagsúla.
AN CHÉAD SCEIDEAL
Coinbhinsiún chun Daoine Aonair a Chosaint maidir le Sonraí Pearsanta a Phróiseáil go hUathoibríoch, arna Dhéanamh i Strasbourg an 28ú lá d'Eanáir, 1981.
BROLLACH
Tá Ballstáit Chomhairle na hEorpa, is sínitheoirí leis seo,
Á bhreithniú dóibh gurb í aidhm Chomhairle na hEorpa aontacht níos mó a bhaint amach i measc a cuid ball, a bheidh bunaithe go háirithe ar urraim do riail an dlí chomh maith le cearta an duine agus saoirsí bunúsacha;
Á bhreithniú dóibh gurb inmhianaithe na cosaintí le haghaidh ceart agus saoirsí bunúsacha do chách a leathnú agus go háirithe an ceart an phríobháideacht a urramú, ag cur san áireamh an méadú ar an sreabhadh trasteorann de shonraí pearsanta atá ag dul faoi phróiseáil uathoibríoch;
Á athdhearbhú dóibh ag an am céanna go bhfuil siad i bhfábhar saoirse faisnéise ar neamhchead do theorainneacha;
Á aithint dóibh gur gá comhréiteach a dhéanamh idir na luachanna bunúsacha a bhaineann le hurraim don phríobháideacht agus an saorshreabhadh faisnéise idir daoine,
Tar éis comhaontú mar a leanas:
CAIBIDIL I—FORÁLACHA GINEARÁLTA
Airteagal 1
Aidhm agus cuspóir
Is é is cuspóir don choinbhinsiún seo urraim dá chearta agus dá shaoirsí bunúsacha a áirithiú i gcríoch gach Páirtí do gach duine aonair, is cuma cad é a náisiúntacht ná a áit chónaithe, agus go háirithe a cheart chun príobháideachta maidir le sonraí pearsanta a bhaineann leis a phróiseáil go huathoibríoch (“cosaint sonraí”).
Airteagal 2
Mínithe
Chun críocha an choinbhinsiúin seo:
a. ciallaíonn “sonraí pearsanta” aon fhaisnéis a bhaineann le duine aonair aitheanta nó inaitheanta (“ábhar sonraí”);
b. ciallaíonn “comhad sonraí uathoibrithe” aon tacar de shonraí atá ag dul faoi phróiseáil uathoibríoch;
c. folaíonn “próiseáil uathoibríoch” na hoibríochtaí seo a leanas má dhéantar iad go hiomlán nó go páirteach trí mhodhanna uathoibrithe: stóráil sonraí, loighicoibríochtaí agus/nó oibríochtaí uimhríochtúla a dhéanamh ar na sonraí sin, iad a athrú, a scriosadh, a aisghabháil nó a leathadh;
d. ciallaíonn “rialaitheoir an chomhaid” an duine nádúrtha nó dlítheanach, an t-údarás poiblí, an ghníomhaireacht nó aon chomhlacht eile atá inniúil de réir an dlí náisiúnta chun a chinneadh cén cuspóir ba chóir a bheith leis an gcomhad sonraí uathoibrithe, cé na haicmí sonraí pearsanta ba chóir a stóráil agus cé na hoibríochtaí ba chóir a chur i bhfeidhm maidir leo.
Airteagal 3
Raon
1. Gabhann na Páirtithe orthu féin an coinbhinsiún seo a chur chun feidhme maidir le comhaid sonraí pearsanta uathoibrithe agus maidir le próiseáil uathoibríoch ar shonraí pearsanta sna hearnálacha poiblí agus príobháideacha.
2. Féadfaidh Stát ar bith an tráth a shíneoidh sé, nó an tráth a bheidh sé ag taisceadh a ionstraime daingniúcháin, glactha, formheasta nó aontachais, nó aon tráth níos déanaí, fógra a thabhairt trí dhearbhú a bheidh dírithe chun Ard-Rúnaí Chomhairle na hEorpa:
a. nach gcuirfidh sé an coinbhinsiún seo chun feidhme maidir le haicmí áirithe de chomhaid sonraí pearsanta uathoibrithe, a mbeidh liosta díobh taiscthe. Sa liosta seo ní áireoidh sé, áfach, aicmí de chomhaid sonraí uathoibrithe a bheidh, faoina dhlí inmheánach, faoi réir fhorálacha um chosaint sonraí. Dá bhíthin sin, leasóidh sé an liosta seo le dearbhú nua aon uair a chuirfear aicmí breise de chomhaid sonraí pearsanta uathoibrithe faoi réir fhorálacha um chosaint sonraí faoina dhlí inmheánach;
b. go gcuirfidh sé an coinbhinsiún seo chun feidhme freisin maidir le faisnéis a bhaineann le grúpaí daoine, comhlachais, fondúireachtaí, cuideachtaí, corparáidí agus aon chomhlachtaí eile arb é atá iontu go díreach nó go hindíreach daoine aonair, cibé acu a bheidh pearsantacht dhlítheanach ag na comhlachtaí sin nó nach mbeidh;
c. go gcuirfidh sé an coinbhinsiún seo chun feidhme freisin maidir le comhaid sonraí pearsanta nach bpróiseáiltear go huathoibríoch.
3. Féadfaidh aon Stát atá tar éis raon an choinbhinsiúin seo a leathnú le haon cheann de na dearbhuithe dá bhforáiltear i bhfomhír 2.b nó c thuas fógra a thabhairt sa dearbhú sin nach mbeidh feidhm ag na leathnuithe sin ach amháin maidir le haicmí áirithe de chomhaid sonraí pearsanta, a mbeidh liosta díobh taiscthe.
4. Aon Pháirtí atá tar éis aicmí áirithe de chomhaid sonraí pearsanta uathoibrithe a eisiamh le dearbhú dá bhforáiltear i bhfomhír 2.a thuas ní fhéadfaidh sé a éileamh go ndéanfadh páirtí nach bhfuil tar éis na haicmí sin a eisiamh an coinbhinsiún seo a fheidhmiú maidir leis na haicmí sin.
5. Mar an gcéanna, ní fhéadfaidh Páirtí nach ndearna ceann éigin de na leathnuithe dá bhforáiltear i bhfomhíreanna 2.b nó c thuas, a éileamh go ndéanfaí an coinbhinsiún seo a fheidhmiú, ar na pointí sin, maidir le Páirtí atá tar éis na leathnuithe sin a dhéanamh.
6. Tiocfaidh na dearbhuithe dá bhforáiltear i mír 2 thuas in éifeacht a luaithe a thiocfaidh an coinbhinsiún i bhfeidhm maidir leis an Stát a rinne iad, má rinneadh iad an tráth sínithe nó an tráth a taisceadh a ionstraim dhaingniúcháin, ghlactha, fhormheasta nó aontachais, nó trí mhí ón tráth a bhfaighidh Ard-Rúnaí Chomhairle na hEorpa iad, má rinneadh iad aon tráth níos déanaí. Féadfar na dearbhuithe seo a aistarraingt go hiomlán nó go páirteach, trí fhógra a bheidh dírithe chun Ard-Rúnaí Chomhairle na hEorpa. Tiocfaidh na haistarraingtí sin in éifeacht trí mhí tar éis an dáta a bhfaighfear an fógra sin.
CAIBIDIL II — BUNPHRIONSABAIL MAIDIR LE COSAINT SONRAÍ
Airteagal 4
Dualgais na bPáirtithe
1. Déanfaidh gach Páirtí na bearta is gá ina dhlí inmheánach chun éifeacht a thabhairt do na bunphrionsabail maidir le cosaint sonraí atá leagtha amach sa chaibidil seo.
2. Déanfar na bearta seo ar a dhéanaí an tráth a thiocfaidh an coinbhinsiún seo i bhfeidhm maidir leis an bPáirtí sin.
Airteagal 5
Cáilíocht Sonraí
Maidir le sonraí pearsanta a bheidh ag dul faoi phróiseáil uathoibríoch:
a. gheofar iad agus próiseálfar iad go cóir agus go dleathach;
b. stórálfar iad chun críocha sonraithe agus dlisteanacha agus ní úsáidfear iad ar shlí a bheidh ar neamhréir leis na críocha sin;
c. beidh siad leordhóthanach agus ábhartha, agus ní bheidh siad iomarcach, i ndáil leis na críocha dá stórálfar iad;
d. beidh siad beacht agus, más gá, coimeádfar cothrom le dáta iad;
e. coimeádfar iad sa chaoi nach mbeidh na hábhair shonraí inaitheanta níos faide ná mar is gá chun na críche dá stórálfar na sonraí sin.
Airteagal 6
Aicmí speisialta sonraí
Ní fhéadfar sonraí pearsanta a nochtann bunadh cine, tuairimí polaitíochta nó tuairimí creidimh nó tuairimí eile, chomh maith le sonraí pearsanta a bhaineann le sláinte nó cleachtadh gnéis, a phróiseáil go huathoibríoch mura soláthróidh an dlí inmheánach cosaintí iomchuí. Beidh feidhm ag an méid sin freisin maidir le sonraí pearsanta a bhaineann le ciontuithe coiriúla.
Airteagal 7
Slándáil sonraí
Glacfar bearta slándála iomchuí chun sonraí pearsanta a stóráiltear i gcomhaid sonraí uathoibrithe a chosaint ar mhilleadh tionóisceach nó ar mhilleadh neamhúdaraithe nó ar chaillteanas tionóisceach agus ar rochtain, athrú nó leathadh neamhúdaraithe.
Airteagal 8
Cosaintí breise don ábhar sonraí
Cuirfear ar chumas aon duine:
a. an méid seo a leanas a shuíomh, eadhon, go bhfuil comhad sonraí pearsanta uathoibrithe ar marthain, príomhchuspóirí an chomhaid, chomh maith le céannacht rialaitheoir an chomhaid agus gnáth-áit chónaithe nó príomh-ionad ghnó an rialaitheora sin;
b. dearbhú a fháil, ag eatraimh réasúnacha agus gan rómhoill ná róchaiteachas, maidir le cé acu an bhfuil sonraí pearsanta a bhaineann leis stóráilte sa chomhad sonraí uathoibrithe agus go gcuirfear na sonraí sin in iúl dó ar shlí intuigthe;
c. na sonraí sin a chur á gceartú nó á scriosadh, de réir mar a bheidh, i gcás iad sin a bheith próiseáilte contrártha d'fhorálacha an dlí inmheánaigh a thugann éifeacht do na bunphrionsabail a leagtar amach in Airteagail 5 agus 6 den choinbhinsiún seo;
d. teacht a bheith aige ar leigheas i gcás nach gcomhlíonfar iarraidh ar dhearbhú nó, de réir mar a bheidh, ar chur in iúl, ar cheartú nó ar scriosadh dá dtagraítear i míreanna b agus c den airteagal seo.
Airteagal 9
Eisceachtaí agus srianta
1. Ní cheadófar aon eisceacht d'fhorálacha Airteagail 5, 6 agus 8 den choinbhinsiún seo ach amháin laistigh de na teorainneacha a shainmhínítear san airteagal seo.
2. Ceadófar maolú ar fhorálacha Airteagail 5, 6 agus 8 den choinbhinsiún seo má dhéantar foráil don mhaolú sin le dlí an Pháirtí agus gurb é atá ann beart riachtanach i sochaí daonlathach:
a. ar mhaithe le slándáil an Stáit, sábháilteacht phoiblí nó leasanna airgeadaíochta an Stáit a chosaint nó cionta coiriúla a chur faoi chois;
b. ar mhaithe leis an ábhar sonraí nó le cearta agus saoirsí daoine eile a chosaint.
3. Féadfar srianta ar fheidhmiú na gceart a shonraítear in Airteagal 8, míreanna b, c agus d, a sholáthar le dlí maidir le comhaid sonraí pearsanta uathoibrithe a úsáidtear le haghaidh staitisticí nó chun críocha taighde eolaíochta nuair is léir nach bhfuil aon bhaol ann go ndéanfar sárú ar phríobháideacht na n-ábhar sonraí.
Airteagal 10
Smachtbhannaí agus leigheasanna
Gabhann gach Páirtí air féin smachtbhannaí agus leigheasanna iomchuí a bhunú le haghaidh sáruithe ar fhorálacha an dlí inmheánaigh a thugann éifeacht do na bunphrionsabail maidir le cosaint sonraí atá leagtha amach sa chaibidil seo.
Airteagal 11
Cosaint leathnaithe
Ní léireofar aon fhoráil d'fhorálacha na caibidle seo mar fhoráil a theorannaíonn nó a dhéanann difear ar shlí eile don deis atá ag Páirtí cosaint bhreise a thabhairt d'ábhair shonraí thar mar atá leagtha síos sa choinbhinsiún seo.
CAIBIDIL III — SREABHADH TRASTEORANN SONRAÍ
Airteagal 12
Sreabhadh trasteorann de shonraí pearsanta agus an dlí inmheánach
1. Beidh feidhm ag na forálacha seo a leanas maidir le haistriú a dhéanamh thar theorainneacha náisiúnta, trí mheán ar bith, ar shonraí pearsanta atá ag dul faoi phróiseáil uathoibríoch nó a bhailítear d'fhonn iad a phróiseáil go huathoibríoch.
2. Ní dhéanfaidh Páirtí, chun príobháideacht a chosaint agus chuige sin amháin, sreabhadh trasteorann de shonraí pearsanta a bheidh ag dul chuig críoch Pháirtí eile a thoirmeasc ná a chur faoi réir údarú speisialta.
3. Ar a shon sin, beidh gach Páirtí i dteideal maolú ar fhorálacha mhír 2:
a. a mhéid a fholaíonn a reachtaíocht rialacháin shonracha le haghaidh aicmí áirithe de shonraí pearsanta nó aicmí áirithe de chomhaid sonraí pearsanta uathoibrithe, mar gheall ar chineál na sonraí nó na gcomhad sin, ach amháin sa chás go gcuireann rialacháin an Pháirtí eile a chomhionann de chosaint ar fáil;
b. nuair a dhéanfar an t-aistriú óna chríoch go dtí críoch Stáit neamh-Chonarthaigh trí chríoch Pháirtí eile, sa dóigh nach dtiocfaidh de na haistrithe sin go dtiocfar timpeall ar reachtaíocht an Pháirtí dá dtagraítear ag tús na míre seo.
CAIBIDIL IV — CÚNAMH FRITHPHÁIRTEACH
Airteagal 13
Comhoibriú idir Páirtithe
1. Comhaontaíonn na Páirtithe cúnamh frithpháirteach a thabhairt dá chéile chun an coinbhinsiún seo a chur i ngníomh.
2. Chun na críche sin:
a. ainmneoidh gach Páirtí údarás amháin nó níos mó agus cuirfidh sé teachtaireacht, ina mbeidh ainm agus seoladh gach údaráis acu, chuig Ard-Rúnaí Chomhairle na hEorpa;
b. déanfaidh gach Páirtí a mbeidh níos mó ná údarás amháin ainmnithe aige inniúlacht gach údaráis a shonrú sa teachtaireacht uaidh dá dtagraítear san fhomhír roimhe seo.
3. Déanfaidh údarás a bheidh ainmnithe ag Páirtí, ar iarraidh ó údarás a bheidh ainmnithe ag Páirtí eile:
a. faisnéis a thabhairt ar a dhlí agus ar a chleachtas riaracháin sa réimse cosanta sonraí;
b. i gcomhréir lena dhlí inmheánach agus chun príobháideacht a chosaint agus chuige sin amháin, gach beart iomchuí a ghlacadh chun faisnéis fhíriciúil a thabhairt i ndáil le próiseáil uathoibríoch shonrach a dhéantar ina chríoch, ach gan na sonraí pearsanta a phróiseáiltear a chur san áireamh.
Airteagal 14
Cúnamh d'ábhair shonraí a bhfuil cónaí orthu thar lear.
1. Tabharfaidh gach Páirtí cúnamh d'aon duine a bhfuil cónaí air thar lear chun na cearta a fheidhmiú a thugtar lena dhlí inmheánach a thugann éifeacht do na prionsabail atá leagtha amach in Airteagal 8 den choinbhinsiún seo.
2. I gcás cónaí a bheith ar an duine sin i gcríoch Pháirtí eile tabharfar an rogha dó a iarraidh a dhéanamh trí mheán an údaráis a bheidh ainmnithe ag an bPáirtí sin.
3. Beidh san iarraidh ar chúnamh, na mionsonraí go léir is gá, a bhaineann inter alia:
a. le hainm, le seoladh agus le haon mhionsonraí iomchuí eile trína n-aithnítear an duine a dhéanann an iarraidh;
b. leis an gcomhad sonraí pearsanta uathoibrithe lena mbaineann an iarraidh nó lena rialaitheoir;
c. le cuspóir na hiarrata.
Airteagal 15
Cosaintí a bhaineann le cúnamh a thugann údaráis ainmnithe
1. Ní dhéanfaidh údarás atá ainmnithe ag Páirtí a fuair faisnéis ó údarás atá ainmnithe ag Páirtí eile, i dteannta iarrata ar chúnamh nó mar fhreagra ar a iarraidh féin ar chúnamh, an fhaisnéis sin a úsáid chun críocha seachas iad sin atá sonraithe san iarraidh ar chúnamh.
2. Féachfaidh gach Páirtí chuige go mbeidh na daoine a bhaineann leis an údarás ainmnithe nó a ghníomhaíonn thar a cheann faoi cheangal ag oibleagáidí iomchuí ó thaobh sicréideachta nó rúndachta maidir leis an bhfaisnéis sin.
3. Ní fhéadfar cead a thabhairt i gcás ar bith d'údarás ainmnithe iarraidh ar chúnamh faoi Airteagal 14, mír 2, a dhéanamh, thar ceann ábhair sonraí a bhfuil cónaí air thar lear, ar a chonlán féin agus gan toiliú sainráite ón duine lena mbaineann.
Airteagal 16
Diúltú d'iarrataí ar chúnamh
Ní fhéadfaidh údarás ainmnithe a mbeidh iarraidh ar chúnamh dírithe chuige faoi Airteagail 13 nó 14 den choinbhinsiún seo diúltú an iarraidh a chomhlíonadh:
a. mura bhfuil an iarraidh ar neamhréir leis na cumhachtaí, sa réimse cosanta sonraí, atá ag na húdaráis atá freagrach as freagra a thabhairt;
b. mura gcomhlíonann an iarraidh forálacha an choinbhinsiúin seo;
c. mura mbeidh comhlíonadh na hiarrata ar neamhréir le ceannasacht, slándáil nó beartas poiblí (ordre public) an Pháirtí a d'ainmnigh é nó le cearta agus saoirsí bunúsacha daoine atá faoi dhlínse an Pháirtí sin.
Airteagal 17
Costais agus nósanna imeachta an chúnaimh
1. Aon chúnamh frithpháirteach a thugann na Páirtithe dá chéile faoi Airteagal 13, agus aon chúnamh a thugann siad d'ábhair shonraí thar lear faoi Airteagal 14, ní bheidh siad ina mbun le haon chostais ná táillí a íoc seachas na costais nó na táillí a thabhaítear maidir le saineolaithe agus ateangairí. Beidh na costais nó na táillí deiridh sin de mhuirear ar an bPáirtí a d'ainmnigh an t-údarás a dhéanann an iarraidh ar chúnamh.
2. Ní fhéadfar costais ná táillí a mhuirearú ar an ábhar sonraí i ndáil leis na bearta a dhéanfar thar a cheann i gcríoch Pháirtí eile seachas iad sin is iníoctha go dleathach ag cónaitheoirí an Pháirtí sin.
3. Déanfar mionsonraí eile maidir leis an gcúnamh, a bhainfidh go háirithe leis na foirmeacha agus na nósanna imeachta agus na teangacha a úsáidfear, a shocrú go díreach idir na Páirtithe lena mbaineann.
CAIBIDIL V — COISTE COMHAIRLEACH
Airteagal 18
Comhdhéanamh an choiste
1. Bunófar Coiste Comhairleach tar éis don choinbhinsiún seo teacht i bhfeidhm.
2. Ceapfaidh gach Páirtí ionadaí don choiste mar aon le leasionadaí. Beidh de cheart ag aon Bhallstát de Chomhairle na hEorpa nach Páirtí sa choinbhinsiún breathnadóir a bheith aige mar ionadaí ar an gcoiste.
3. Féadfaidh an Coiste Comhairleach, le cinneadh d'aontoil, a iarraidh ar aon Stát nach Ballstát de Chomhairle na hEorpa agus nach Páirtí sa choinbhinsiún breathnadóir a bheith aige mar ionadaí ag cruinniú áirithe.
Airteagal 19
Feidhmeanna an choiste
Maidir leis an gCoiste Comhairleach:
a. féadfaidh sé moltaí a dhéanamh d'fhonn feidhmiú an choinbhinsiúin a urasú nó a fheabhsú;
b. féadfaidh sé moltaí a dhéanamh chun an coinbhinsiún seo a leasú de réir Airteagal 21;
c. foirmeoidh sé a thuairim ar aon mholadh chun an coinbhinsiún seo a leasú a tharchuirtear chuige de réir Airteagal 21, mír 3;
d. féadfaidh sé, ar iarraidh ó Pháirtí, tuairim a thabhairt ar aon cheist a bhaineann le feidhmiú an choinbhinsiúin seo.
Airteagal 20
Nós Imeachta
1. Comórfaidh Ard-Rúnaí Chomhairle na hEorpa an Coiste Comhairleach. Seolfar a chéad chruinniú laistigh de dhá mhí dhéag tar éis don choinbhinsiún seo teacht i bhfeidhm. Tiocfaidh sé le chéile ar a laghad uair amháin gach dhá bhliain ina dhiaidh sin agus in aon chás nuair a iarrann trian d'ionadaithe na bPáirtithe é a thionól.
2. Is é a bheidh i gcóram do chruinniú den Choiste Comhairleach tromlach d'ionadaithe na bPáirtithe.
3. Tar éis gach ceann dá chuid cruinnithe cuirfidh an Coiste Comhairleach tuarascáil faoi bhráid Choiste Airí Chomhairle na hEorpa faoina chuid oibre agus faoi oibriú an choinbhinsiúin.
4. Faoi réir fhorálacha an choinbhinsiúin seo, tarraingeoidh an Coiste Comhairleach suas a Rialacha Nós Imeachta féin.
CAIBIDIL VI — LEASUITHE
Airteagal 21
Leasuithe
1. Féadfaidh Páirtí, Coiste Airí Chomhairle na hEorpa nó an Coiste Comhairleach leasuithe ar an gcoinbhinsiún seo a mholadh.
2. Cuirfidh Ard-Rúnaí Chomhairle na hEorpa aon mholadh faoi leasú in iúl do Bhallstáit Chomhairle na hEorpa agus do gach Stát nach Ballstát a d'aontaigh, nó ar iarradh orthu aontú, don choinbhinsiún seo de réir fhorálacha Airteagal 23.
3. Fairis sin, cuirfear aon leasú a mhol Páirtí nó an Coiste Airí in iúl don Choiste Comhairleach agus cuirfidh seisean a thuairim faoin leasú atá molta faoi bhráid an Choiste Airí.
4. Breithneoidh an Coiste Airí an leasú atá molta agus aon tuairim a chuir an Coiste Comhairleach faoina bhráid agus féadfaidh sé an leasú a cheadú.
5. Cuirfear téacs aon leasaithe a bheidh ceadaithe ag an gCoiste Airí de réir mhír 4 den Airteagal seo ar aghaidh chuig na Páirtithe le go nglacfaidh siad leis.
6. Tiocfaidh aon leasú a bheidh ceadaithe de réir mhír 4 den Airteagal seo i bhfeidhm ar an tríochadú lá tar éis do gach Páirtí a chur in iúl don Ard-Rúnaí go bhfuil siad ag glacadh leis.
CAIBIDIL VII — CLÁSAIL CHRÍOCHNAITHEACHA
Airteagal 22
Teacht i bhfeidhm
1. Beidh an coinbhinsiún seo ar oscailt lena shíniú ag Ballstáit Chomhairle na hEorpa. Beidh sé faoi réir a dhaingnithe, a ghlactha nó a fhormheasta. Taiscfear ionstraimí daingniúcháin, glactha nó formheasta le hArd-Rúnaí Chomhairle na hEorpa.
2. Tiocfaidh an coinbhinsiún seo i bhfeidhm an chéad lá den mhí i ndiaidh tréimhse trí mhí a bheith caite tar éis an dáta a léireoidh cúig Bhallstát de Chomhairle na hEorpa go dtoilíonn siad a bheith faoi cheangal ag an gcoinbhinsiún de réir fhorálacha na míre roimhe seo.
3. Maidir le haon Bhallstát a léireoidh iardain go dtoilíonn siad a bheith faoi cheangal aige, tiocfaidh an coinbhinsiún i bhfeidhm an chéad lá den mhí i ndiaidh tréimhse trí mhí a bheith caite tar éis an dáta a thaiscfear an ionstraim dhaingniúcháin, ghlactha nó fhormheasta.
Airteagal 23
Aontachas ag Stáit nach Ballstáit
1. Tar éis don choinbhinsiún seo teacht i bhfeidhm, féadfaidh Coiste Airí Chomhairle na hEorpa a iarraidh ar aon Stát nach ball de Chomhairle na hEorpa aontú don choinbhinsiún seo le cinneadh arna thógáil ag an tromlach dá bhforáiltear in Airteagal 20. d de Reacht Chomhairle na hEorpa agus le vóta d'aontoil na n-ionadaithe de chuid na Stát Conarthach a bheidh i dteideal suí ar an gcoiste.
2. Maidir le haon Stát aontach, tiocfaidh an coinbhinsiún i bhfeidhm an chéad lá den mhí i ndiaidh tréimhse trí mhí a bheith caite tar éis an dáta a thaiscfear an ionstraim aontachais le hArd-Rúnaí Chomhairle na hEorpa.
Airteagal 24
Clásal maidir le críocha
1. Féadfaidh aon Stát an tráth a shíneoidh sé nó nuair a thaiscfidh sé a ionstraim dhaingniúcháin, ghlactha, fhormheasta nó aontachais, an chríoch nó na críocha lena mbeidh feidhm ag an gcoinbhinsiún seo a shonrú.
2. Féadfaidh aon Stát ar aon dáta níos déanaí, trí dhearbhú a bheidh dírithe chun Ard-Rúnaí Chomhairle na hEorpa, feidhmiú an choinbhinsiúin seo a leathnú chuig aon chríoch eile a bheidh sonraithe sa dearbhú. Maidir le críoch den sórt sin, tiocfaidh an coinbhinsiún i bhfeidhm ar an gcéad lá den mhí i ndiaidh tréimhse trí mhí a bheith caite tar éis an dáta a bhfaighidh an tArd-Rúnaí an dearbhú sin.
3. Féadfar aon dearbhú a dhéantar faoin dá mhír roimhe seo a tharraingt siar i leith aon chríche a bheidh sonraithe ann trí fhógra a bheidh dírithe chuig an Ard-Rúnaí. Tiocfaidh an tarraingt siar in éifeacht ar an gcéad lá den mhí i ndiaidh tréimhse sé mhí a bheith caite tar éis an dáta bhfaighidh an tArd-Rúnaí an fógra sin.
Airteagal 25
Forchoimeádais
Ní fhéadfar aon fhorchoimeádas a dhéanamh maidir le forálacha an choinbhinsiúin seo.
Airteagal 26
Séanadh
1. Féadfaidh aon Pháirtí tráth ar bith an coinbhinsiún seo a shéan adh trí fhógra a bheidh dírithe chun Ard-Rúnaí Chomhairle na hEorpa.
2. Tiocfaidh an séanadh sin in éifeacht ar an gcéad lá den mhí i ndiaidh tréimhse sé mhí a bheith caite tar éis an dáta a bhfaighidh an tArd-Rúnaí an fógra.
Airteagal 27
Fógraí
Cuirfidh Ard-Rúnaí Chomhairle na hEorpa fógra chuig Ballstáit na Comhairle agus chuig aon Stát a d'aontaigh don choinbhinsiún seo maidir le:
a. aon síniú;
b. taisceadh aon ionstraime daingniúcháin, glactha, formheasta nó aontachais;
c. aon dáta ar a dtiocfaidh an coinbhinsiún seo i bhfeidhm de réir Airteagail 22, 23 agus 24;
d. aon ghníomh, fógra nó teachtaireacht eile a bhaineann leis an gcoinbhinsiún seo.
Dá fhianú sin, chuir na daoine thíos-sínithe, agus údarás cuí acu chuige sin, a lámh leis an gCoinbhinsiún seo.
Arna dhéanamh i Strasbourg, an 28ú lá d'Eanáir 1981, i mBéarla agus i bhFraincis, agus comhúdarás ag an dá théacs, in aon chóip amháin a fhanfaidh i dtaisce i gcartlann Chomhairle na hEorpa. Tarchuirfidh Ard-Rúnaí Chomhairle na hEorpa cóipeanna deimhnithe chuig gach Ballstát de Chomhairle na hEorpa agus chuig aon Stát a n-iarrfar air aontú don Choinbhinsiún seo.
AN DARA SCEIDEAL
An Coimisinéir Cosanta Sonraí
1. Beidh an Coimisinéir ina chomhlacht corpraithe agus beidh sé neamhspleách agus a chuid feidhmeanna á gcomhlíonadh aige.
2. (1) Ceapfaidh an Rialtas an Coimisinéir agus, faoi réir fhorálacha an Sceidil seo, sealbhóidh sé oifig ar cibé téarmaí agus coinníollacha a chinnfidh an Rialtas.
(2) Maidir leis an gCoimisinéir—
(a) féadfaidh sé éirí as oifig mar Choimisinéir tráth ar bith trí litir a bheidh dírithe chuig Rúnaí an Rialtais agus glacfaidh an t-éirí-as éifeacht ar an agus ón dáta a bhfaighfear an litir,
(b) féadfaidh an Rialtas é a chur as oifig tráth ar bith más dóigh leis an Rialtas go bhfuil sé éirithe neamhinniúil, de dheasca drochshláinte, ar a fheidhmeanna a chomhlíonadh go héifeachtach nó gur mhí-iompair sé é féin mar a bheidh luaite, agus
(c) éireoidh sé as oifig an Choimisinéara ar chaoi ar bith ar 65 bliana d'aois a bhaint amach.
3. Is é an téarma oifige a bheidh ag duine a cheapfar mar Choimisinéir cibé téarma nach faide ná 5 bliana a chinnfidh an Rialtas tráth a cheaptha agus, faoi réir fhorálacha an Sceidil seo, féadfar é a athcheapadh chun na hoifige.
4. (1) Más rud é, maidir leis an gCoimisinéir—
(a) go n-ainmneofar é mar chomhalta de Sheanad Éireann,
(b) go dtoghfar é mar chomhalta de cheachtar Teach den Oireachtas, de Pharlaimint na hEorpa nó d'údarás áitiúil, nó
(c) go measfar, de bhun alt 15 (a cuireadh isteach leis an Acht um Thoghcháin do Thionól na hEorpa, 1984) den Acht um Thoghcháin do Thionól na hEorpa, 1977, é a bheith tofa chun na Parlaiminte sin chun folúntas a líonadh,
scoirfidh sé air sin de bheith ina Choimisinéir.
(2) Duine a bheidh de thuras na huaire—
(i) i dteideal faoi bhuan-orduithe cheachtar Tí den Oireachtas suí sa Teach sin,
(ii) ina chomhalta de Pharlaimint na hEorpa, nó
(iii) i dteideal faoi bhuan-orduithe údaráis áitiúil suí ar an údarás sin,
beidh sé, fad a bheidh sé i dteideal amhlaidh nó ina chomhalta den sórt sin, dícháilithe chun oifig an Choimisinéara a shealbhú.
5. Ní shealbhóidh an Coimisinéir aon oifig ná fostaíocht eile a bhfuil díolaíochtaí iníoctha ina leith.
6. Íocfar leis an gCoimisinéir, as airgead a sholáthróidh an tOireachtas, cibé luach saothair agus liúntais le haghaidh caiteachas a chinnfidh an tAire, le toiliú an Aire Airgeadais, ó am go ham.
7. (a) Déanfaidh an tAire, le toiliú an Aire Airgeadais, scéim nó scéimeanna chun pinsin, aiscí nó liúntais eile a dheonú do dhaoine a shealbhaigh oifig an Choimisinéara, nó a dheonú ina leith, ar scor nó ar bhás dóibh, agus cuirfidh sé an scéim nó na scéimeanna sin i gcrích de réir a téarmaí.
(b) Féadfaidh an tAire, le toiliú an Aire Airgeadais, tráth ar bith scéim nó scéimeanna ag leasú nó ag cúlghairm scéime faoin mír seo a dhéanamh agus an scéim nó na scéimeanna sin a chur i gcrích de réir a téarmaí.
(c) Leagfar scéim faoin mír seo faoi bhráid gach Tí den Oireachtas a luaithe is féidir tar éis a déanta agus má dhéanann ceachtar Teach acu sin, laistigh den 21 lá a shuífidh an Teach sin tar éis an scéim a leagan faoina bhráid, rún a rith ag neamhniú na scéime, beidh an scéim ar neamhní dá réir sin, ach sin gan dochar do bhailíocht aon ní a rinneadh roimhe sin faoin scéim.
8. (1) Féadfaidh an tAire cibé líon daoine a chinnfidh an tAire ó am go ham, le toiliú an Aire Airgeadais, a cheapadh le bheith ina gcomhaltaí d'fhoireann an Choimisinéara.
(2) Is státseirbhísigh a bheidh i gcomhaltaí d'fhoireann an Choimisinéara.
(3) Féadfaidh cibé comhalta d'fhoireann an Choimisinéara a ainmneoidh sé chun na críche sin, feidhmeanna an Choimisinéara faoin Acht seo a chomhlíonadh le linn don Choimisinéir a bheith as láthair go sealadach.
(4) Féadfaidh an tAire na cumhachtaí is infheidhmithe aige faoi Acht Choimisinéirí na Stát-Sheirbhíse, 1956, agus faoi Achtanna Rialaithe na Státseirbhíse, 1956 agus 1958, a tharmligean chun an Choimisinéara mar an údarás iomchuí i ndáil le comhaltaí d'fhoireann an Choimisinéara agus má dhéanann sé sin, ansin fad a fhanfaidh an tarmligean i bhfeidhm—
(a) beidh na cumhachtaí sin, in ionad iad a bheith infheidhmithe ag an Aire, infheidhmithe ag an gCoimisinéir, agus
(b) is é an Coimisinéir, in ionad an Aire, an t-údarás iomchuí chun críocha an Achta seo i ndáil le comhaltaí d'fhoireann an Choimisinéara.
9. (1) Coimeádfaidh an Coimisinéir i cibé foirm a cheadóidh an tAire, le toiliú an Aire Airgeadais, na cuntais go léir is cuí agus is gnách ar an airgead go léir a gheobhaidh sé nó a chaithfidh sé agus na cuntais speisialta sin go léir (más ann) a ordóidh an tAire le toiliú an Aire Airgeadais.
(2) Déanfaidh an Coimisinéir cuntais a choimeádfar de bhun na míre seo i leith gach bliana a chur faoi bhráid an Ard-Reachtaire Cuntas agus Ciste an bhliain ina dhiaidh sin ar dháta (nach déanaí ná dáta a shonróidh an tAire) lena n-iniúchadh agus a luaithe is féidir tar éis an iniúchta déanfaidh an Coimisinéir cóip de na cuntais sin nó de cibé sleachta as na cuntais sin a shonróidh an tAire, mar aon le tuarascáil an Ard-Reachtaire Cuntas agus Ciste ar na cuntais, a thíolacadh don Aire agus cuirfidh seisean faoi deara cóipeanna de na doiciméid a tíolacadh dó a leagan faoi bhráid gach Tí den Oireachtas.
AN TRÍÚ SCEIDEAL
Údaráis Phoiblí agus Comhlachtaí agus Daoine Eile
1. An Rialtas.
2. Aire den Rialtas.
3. An tArd-Aighne.
4. An tArd-Reachtaire Cuntas agus Ciste.
5. An tOmbudsman.
6. Údarás áitiúil, bord sláinte agus aon chomhlacht eile (seachas an Garda Síochána agus Óglaigh na hÉireann) a bunaíodh—
(1) le haon achtachán (seachas Achtanna na gCuideachtaí, 1963 go 1987), nó faoi, nó
(2) faoi Achtanna na gCuideachtaí, 1963 go 1987, de bhun chumhachtaí a tugadh le hachtachán eile nó faoi, agus a mhaoinítear go hiomlán nó go páirteach le hairgead arna sholáthar ag Aire den Rialtas nó le hiasachtaí arna ndéanamh nó arna ráthú aige nó trí scaireanna a shealbhaíonn Aire den Rialtas nó a shealbhaítear thar a cheann a eisiúint; agus fochuideachta d'aon chomhlacht den sórt sin.
7. Cuideachta a bhfuil tromlach de na scaireanna inti á shealbhú ag Aire den Rialtas nó thar a cheann.
8. Comhlacht (seachas comhlacht a luaitear i mír 6 nó 7 den Sceideal seo) arna cheapadh ag an Rialtas nó ag Aire den Rialtas.
9. Duine aonair (seachas duine aonair a fhaigheann luach saothair ó chomhlacht a luaitear i mír 6, 7 nó 8 den Sceideal seo nó arb é an t-údarás iomchuí maidir leis, an Rialtas nó Aire den Rialtas) atá ceaptha ag an Rialtas nó ag Aire den Rialtas chuig oifig arna bunú le haon achtachán nó faoi aon achtachán.
10. Aon údarás poiblí, comhlacht nó duine eile a bheidh forordaithe de thuras na huaire agus a bheidh maoinithe, nó a fhaigheann luach saothair, go hiomlán nó go páirteach, as airgead arna sholáthar ag an Oireachtas.