88. Deputy Paul Kehoe asked the Minister for Housing, Local Government and Heritage if he is aware of a case of a data breach (details supplied) where a named individual’s personal data were disclosed to a public representative without the person’s permission; the implications of this data breach; what action has been taken; and if he will make a statement on the matter. [45328/24]

Under Section 149 of the Local Government Act 2001, the Chief Executive of a local authority is responsible for the executive functions of the local authority, and for that purpose to manage and control generally, the administration and business of the authority, subject to law.

All Local Authorities are required to have a data protection policy which must be adhered to. As set out in the Wexford County Council data protection policy, which can be found on the Council’s website: www.wexfordcoco.ie/sites/default/files/content/GDPR/Wexford-County-Council-Data-Protection-Policy-GDPR-18.pdf,  “personal data shall be: (a) Processed lawfully, fairly and in a transparent manner in relation to the data subject b) Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes..”

A breach of the nature outlined would be considered a very serious matter, therefore, if determined, an obligation exists to notify the Data Protection Commission of a personal data breach and for all public bodies to maintain a register of all personal data breaches.

In this regard, it is more appropriate that this question be posed to Wexford County Council directly.