2.13 Can I ask my customers to inform their friends via my website as part of a "tell a friend" scheme about my products and services? published on 02 April 2009 2.13 Can I ask my customers to inform their friends via my website as part of a "tell a friend" scheme about my products and services?This depends on the way the scheme operates. It is more likely to be acceptable if the content of the message is determined solely by the sending customer. |
CáS STAIDéAR 3 Achainí rochtana – comhairle dlí nár chóir é a thabhairt de bharr cás san Ard-Chúirt – comhlíonadh i ndiaidh idirghabháil ón Oifig published on 27 July 2006 Fuair mé gearán ó fhostaí de chuid scoil cúraim cónaitheach, maidir le teip na scoile de réir dealraimh chun chomhlíonadh le hachainí um rochtain do shonraí phearsanta i seilbh an scoil maidir leis. |
Case Study 13 - Irish Insurance Federation - Complaint about information on central registry. published on 13 June 2007 My Office received a complaint from an individual regarding the refusal of the Irish Insurance Federation (IIF) to delete information from its central registry. The individual concerned had requested that the Irish Insurance Federation remove the details relating to her from the IIF central registry as she believed the information to be incorrect. Under Section 6 of the Data Protection Acts, 1988 and 2003, an individual |
Case Study 13/96 Criminal Conviction Sruck Out but Details remained on Garda Records published on 03 December 1996 Some years ago a young man was convicted of a minor offence. He appealed the sentence, and the Probation of Offenders Act, 1907, was applied. This meant that his conviction was struck out and, for example, could not be mentioned if he were later prosecuted for something else. |
Case Study 3 - 2005 published on 10 April 2006 Access request – legal advice that it should not be granted because of High Court proceedings – compliance following intervention by Office. |
Case Study 3 - DELL: Persistent direct marketing published on 13 June 2007 If you do not want to receive direct marketing, you have a right to notify the sender that you object to receiving such material. This request must be made in writing and an organisation that fails to respect your stated preference shall be in contravention of the Acts.During the course of the year, I received a proportionally large number of complaints from individuals who were continuing to receive marketing material from DELL despite having |
Case Study 3/00 Mobile Telephone Company published on 19 October 2000 The complainant in this case had difficulty when he attempted to purchase a mobile telephone from a shop. The shop took his details on a sign-up form, and telephoned the mobile phone company to activate the service, which was to operate on a contract basis. The mobile telephone company declined to accept the complainant as a customer, and refused to give reasons. |
Case Study 3/02 Gardai - Inappropriate Data on “Pulse system” published on 20 April 2002 Gardai- Inappropriate data on “Pulse system” -data deleted when access request received- not fair to person- could frustrate the provisions of the Act A person contacted my Office as she believed that An Garda Síochána were holding data about her on their “PULSE” database which was untrue. The complainant had made an access request to An Garda Síochána under section 4 of the Act but she did not believe that this request had been complied with as she believed that certain details had not been furnished to her. |
Case Study 3/03 Visa Application Details published on 04 May 2003 Visa application details accidentally put on website of Department of Justice, Equality and Law Reform A journalist contacted my office with urgent concerns regarding the publication on a website of personal details of visa applicants. I investigated the matter and found that the personal data of visa applicants had been displayed by the Immigration & Citizenship Division of the Department of Justice, Equality & Law Reform on the Department's website on 6 February, 2003. |
Case Study 3/04 - References and salary details disclosed without permission published on 10 January 2005 I received a complaint from an individual who had applied for a specialized medical post with a major hospital. He had forwarded his CV accompanied by a letter in which he stated that he withheld consent to the organisation contacting the referees listed on his CV until "mutual interest" had been established and he had time to appraise the referees of his intentions. |
Case Study 3/2001 Employee Performance Ratings Disclosed published on 18 June 2001 Employee performance ratings disclosed to other staff – inadequate security. I received a letter of complaint from a number of employees within a particular company. It appeared that the company had created a computer file setting out performance assessment reports for individual members of staff. The file – of which staff members had been unaware – was accessible throughout the company to a wide range of line managers, including managers who had no role in relation to the staff members in question. |
Case Study 3/96 Compatibility of Use of Personal Data published on 20 June 1996 Three people complained that a Government Department disclosed personal data (their names and addresses) to a state-sponsored company to promote a service, which was the responsibility of that Department. I decided that none of the provisions of the Data Protection Act were contravened........ |
Case Study 3/97 Employees Sought Access to Consultants' Study published on 15 April 1997 A company engaged consultants to evaluate some of its senior management posts. Knowing that the consultants' reports were kept in computerised form, the occupants of a number of these posts made a request to the consultants, under section 4 of the Act, for copies of the information relating to themselves. The consultants did not respond within the period of 40 days provided for in section 4(1)(a), and the employees concerned complained to me. |
Case Study 3/98 Joint Bank Account published on 02 September 1998 The complainant and another person held a joint account with a bank. It came to the complainant's attention that her name was not included in the details of the account kept by the bank. The bank undertook to correct the omission. Subsequently, the complainant found that the name which was recorded on the account was not her own, but a name similar to hers that could be regarded as having a certain public notoriety |
Case Study 3/99 Vehicle Registration Unit published on 19 July 1999 He received a letter from the motor distributor advising him of a technical fault and offering to repair the fault for him. The letter indicated that the distributor was able to contact him directly through the co-operation of the Vehicle Registration Unit (VRU) of the Department of the Environment and Local Government. |
Data Protection Act 1988 - 1st 2nd 3rd Schedules published on 13 July 1988 Chapter 1 - The purpose of this convention is to secure in the territory of each Party for every individual, whatever his nationality or residence, respect for his rights and fundamental freedoms, and in particular his right to privacy, with regard to automatic processing of personal data relating to him ("data protection"). |
EU Directive 95/46/EC - Chapters 3 to 7 & Final Provisions published on 24 October 1988 Without prejudice to any administrative remedy for which provision may be made, inter alia before the supervisory authority referred to in Article 28, prior to referral to the judicial authority, Member States shall provide for the right of every person to a judicial remedy for any breach of the rights guaranteed him by the national law applicable to the processing in question. |
Guidance Notes - Monitoring of Staff published on 21 March 2005 The Data Protection Commissioner accepts that organisations have a legitimate interest to protect their business, reputation, resources and equipment. To achieve this, organisations may wish to monitor staff's use of email, the internet, and the telephone. |
Guidance Notes for Doctors - Applying for Registration under the Data Protection Acts 1988 and 2003 published on 22 February 2005 This document is intended as a guide for Doctors applying for registration as a Data Controller. |
Press Release - People not Aware of their Privacy Rights published on 30 April 2003 "While the privacy rights of citizens and consumers are very important to them, alas they are not fully aware of them", said Data Protection Commissioner, Mr Joe Meade, today at the launch of his 2002 Annual Report. |
Press Release - Privacy Fears on the Increase, warns Data Protection Commissioner published on 13 January 2003 Irish people are growing increasingly concerned about the erosion of their personal privacy, according to a survey published today by the Data Protection Commissioner, Mr Joe Meade. Intrusive business practices, fears about internet privacy, and a lack of information about Government initiatives have contributed to what Mr Meade termed a “trust deficit” that could undermine Ireland's progress towards e-commerce |
Press Release - Retention of Communications Traffic Data published on 24 February 2003 I very much welcome this forum and I compliment Minister McDowell for hosting it as it is necessary that an informed debate takes place on this important matter. Let me say at the outset that as Data Protection Commissioner I will be supportive of measures that are demonstrably necessary to protect against crime or terrorism but such measures must be proportionate and have regard to the human right to privacy. |
STATUTORY INSTRUMENTS - S. I. No. 535 of 2003 published on 06 August 2008 EUROPEAN COMMUNITIES (ELECTRONIC COMMUNICATIONS NETWORKS AND SERVICES) (DATA PROTECTION AND PRIVACY) REGULATIONS 2003 Made by the Minister for Communications,Marine and Natural Resources.Prn. 1190 Price €3.81 This document is also available in pdf format for downloadTable of Contents S.I. No. 535 of 2003EUROPEAN COMMUNITIES (ELECTRONIC COMMUNICATIONS NETWORKS |