Data Protection Act, 1988
38 of 50
https://www.irishstatutebook.ie/eli/1988/act/25/enacted/en/print.html?printonload=true
Special categories of data
Personal data revealing racial origin, political opinions or religious or other beliefs, as well as personal data
concerning health or sexual life, may not be processed automatically unless domestic law provides appropriate
safeguards. The same shall apply to personal data relating to criminal convictions.
Article 7
Data security
Appropriate security measures shall be taken for the protection of personal data stored in automated data files
against accidental or unauthorised destruction or accidental loss as well as against unauthorised access, alteration or
dissemination.
Article 8
Additional safeguards for the data subject
Any person shall be enabled:
a. to establish the existence of an automated personal data file, its main purposes, as well as the identity and
habitual residence or principal place of business of the controller of the file;
b. to obtain at reasonable intervals and without excessive delay or expense confirmation of whether personal
data relating to him are stored in the automated data file as well as communication to him of such data in an intelligible
form;
c. to obtain, as the case may be, rectification or erasure of such data if these have been processed contrary to the
provisions of domestic law giving effect to the basic principles set out in Articles 5 and 6 of this convention;
d. to have a remedy if a request for confirmation or, as the case may be, communication, rectification or erasure
as referred to in paragraphs b and c of this article is not complied with.
Article 9
Exceptions and restrictions
21.02.23, 18:36