Department of Social Protection fined €550k for unlawful database of millions of Irish people's faces
IRELAND'S MAJOR DATA watchdog has fined the Department of Social Protection €550,000 following a major investigation into its use of facial recognition technology linked to the Public Services Card.
The Data Protection Commission (DPC) inquiry, launched in July 2021, examined the DSP's 'SAFE 2′ registration process, which requires applicants to submit biometric facial data used for facial matching as part of their card application.
The Public Services Card is needed for accessing many welfare and public services, including applications for Child Benefit, Jobseeker's Benefit and driving licences.
A sample Public Services Card.
Department of Social Protection
Department of Social Protection
'SAFE 2′ registration has led to the Department of Social Protection holding biometric facial templates for about 70% of Ireland's population, making it one of the largest biometric data collections in the country.
The DPC inquiry found that the Department did not have a valid legal reason to collect or keep this sensitive facial data.
According to the DPC, the Department also failed to clearly inform people about how their data would be used, and the Department's privacy risk assessment was 'incomplete'.
As well as the €550,000 fine, the data watchdog ordered the department to cease processing biometric data for 'SAFE 2′ registration by March next year, unless a lawful basis is identified.
Deputy Commissioner Graham Doyle said that the DPC decision 'does not challenge the principle of SAFE 2 registration itself'.
'The technical and security measures in place for handling biometric data are sound,' Doyle said in a statement.
Advertisement
'Our concerns relate to whether the legal framework and the way the Department of Social Protection operates the system meet the requirements of data protection law. We found clear gaps in that regard.'
The DPC emphasised the need for a clear and precise legal basis when processing such sensitive data, as required by European privacy laws (GDPR), to protect individuals from arbitrary interference with their privacy rights.
The DPC's decision was made by Data Protection Commissioner Dale Sunderland, and was notified to the Department of Social Protection this week.
The Department of Social Protection has yet to comment on the ruling.
'More than a decade late'
The Irish Council for Civil Liberties (ICCL), which has campaigned against the use of facial recognition in the Public Services Card for more than 15 years, welcomed the decision but described it as 'more than a decade late and inadequate.'
Joe O'Brien, ICCL's Executive Director, said the ruling 'vindicates the actions taken by ICCL and Digital Rights Ireland against the Department of Employment and Social Protection'.
He said the ruling also confirmed what they had long argued – that the Department unlawfully collected facial records from millions without proper legal grounds or clear explanation.
'The Public Services Card, which was estimated to have cost the State €100 million, trespassed upon human rights and infringed EU and Irish law,' O'Brien said.
'The Department effectively created a de facto national biometric ID system by stealth over 15-plus years without a proper legal foundation. This illegal database of millions of Irish people's biometric data must be deleted.'
Olga Cronin, Senior Policy Officer at ICCL, criticised the mandatory nature of the facial recognition process.
'The Department unlawfully forced vulnerable people to give it their biometric data before it would help them,' Cronin said.
'It demanded data from people who needed its help to put food on the table. We should not have to trade our biometric data to access essential services to which we are already legally entitled.'
Readers like you are keeping these stories free for everyone...
A mix of advertising and supporting contributions helps keep paywalls away from valuable information like this article.
Over 5,000 readers like you have already stepped up and support us with a monthly payment or a once-off donation.
Learn More
Support The Journal
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
The Irish Sun
18 hours ago
- The Irish Sun
New larger Child Benefit payments plan with extra top-up rate on €140 cash for families with three or more kids
FAMILIES with three or more children could soon be receiving larger Child Benefit payments under new plans being examined by the Government. The move is being looked at to try and boost birth rates, it has been reported. Advertisement This week, The €140 flat payment will still be paid to everyone, regardless of income. The €140 payment per child is currently the same regardless of the number of However, a higher top-up rate could also be paid for the third and subsequent children to encourage more births. Advertisement Read more in Money A policy paper is currently being worked on to set out the options ahead of the budget. Other areas being examined to reduce child poverty levels are payments for children of primary-school age, lone parents, working families on low incomes and children with disabilities. The Taoiseach has also pointed to initiatives such as free He said: 'We are looking at a range of measures, in respect of the next budget, to bring down child poverty.' Advertisement Most read in Money Child Benefit payments are universal, and are paid to parents regardless of their income - but it has risen by less than €10 in the last 20 years. Little known social welfare benefits thousands are entitled to The monthly payment for a first child was €131.60 in 2004 and stands at €140 now, just six per cent higher. CHILD BENEFIT PAYMENT DATES THERE are five Child Benefit payments left in the year. July 1 August 5 - may be paid early due to August Bank Holiday September 2 October 7 November 4 The Child Benefit rate reached €166 during the Celtic Tiger era, but was reduced during the recession to its current rate. Research by the State's economic think tank looked at the effect of bringing in a second tier of Child Benefit to address child poverty, at a cost of €800m. Advertisement NO SUMMER DOUBLE CHILD BENEFIT BOOST A DOUBLE €280 August Child Benefit promised by Fine Gael leader Simon Harris last year is unlikely to hit the accounts of the over 650,000 Irish families who benefit from the boost. In November 2024, then Taoiseach In a post on Instagram, he said: "A double child benefit payment every August to help parents with costs, particularly around the costs of schools and the additional costs parents often face over the summer. "Please share to spread the word. I need your support for Fine Gael so I can get on with delivering on this agenda." However, his proposed August double payment is unlikely to happen. When asked this month if the double August Child Benefit is being considered, the Department of Social Protection confirmed that the boost is not outlined in the Programme for Government. 1 The move is being looked at to try and boost birth rates, it has been reported Credit: Getty Images - Getty
The Irish Sun
3 days ago
- The Irish Sun
Sky Ireland in fresh ‘consequences' dodgy box warning to thousands of Irish households amid illegal streaming clampdown
SKY Ireland is warning thousands of households that dodgy box users and distributors will face "consequences" if caught illegally streaming content. It's believed that at least 400,000 people in Ireland use a dodgy box to access content. Dodgy boxes allow people to illegally stream It is If caught, it could lead to fines of up to €127,000 or Sky Ireland and other industry bodies will shortly appear before the READ MORE IN IRISH NEWS The appearance comes after an injunction and search order was issued against a potential operator of an illegal streaming service in Two others linked to the dodgy box operation were issued cease-and-desist orders. Issued by Federation Against Copyright Theft, it warned them they would face criminal prosecution if they failed to stop 'illicit streaming activities'. Sky Ireland CEO JD Buckley told the MOST READ IN THE IRISH SUN "We continuously evolve our investigative strategies to crack down on illegal streaming and protect consumers from risks including malware, "Further action will follow with consequences for those identified as operating illegal services and for those who watch them." The Data Protection Commission confirmed that it has been engaging with USE OF PERSONAL DATA This relates to Sky's use of personal data in an effort to clamp down on the issue. DPC Chairperson Dr Des Hogan told RTE: "There are legitimate reasons why companies might decide that they want to take action against fraud. "However, the use of personal data would be the question for us, and whether that's been done in an appropriate, ethical manner." He revealed that both parties have been in talks for some time, and will have a meeting in two weeks. Hogan added: "Any sharing of personal data, or processing of that personal data outside a company has to be done in a lawful manner under the GDPR. "So that will be the focus of our discussions, and has been the focus of our discussions with Sky and we're hopeful we'll see a successful landing point from those discussions." It's understood that Sky has confirmed it has been in talks with the DPC regarding this issue for some time. A spokesperson said: "We look forward to continuing our discussions with them on this important matter." 1 It's believed around 400,000 people use dodgy boxes in Ireland Credit: Getty Images - Getty
Irish Examiner
3 days ago
- Irish Examiner
Department head 'unhappy' about housing charity leaving hotel it bought empty for three years
The head of the Department of Housing has acknowledged he is 'unhappy' with a situation which saw the Peter McVerry Trust purchase a Dublin hotel for €6.2m which has lain vacant for the past three years. Secretary general of the department, Graham Doyle, told the Public Accounts Committee on Thursday that the funding for the hotel had been part obtained via his department. He said it is 'working through' the options in terms of actioning the vacant building for social housing. The Georgian building in question, formerly Latchford's Hotel on Dublin's Baggot Street, was first purchased by the charity in 2022 after being placed for sale on the open market. The 20-bedroom hotel has remained vacant ever since in the aftermath of financial governance scandals which have shaken the Trust, one of the country's largest providers of homeless accommodation. Mr Doyle said the hotel had been funded by his department before the difficulties at the housing charity had emerged. He noted that the property had initially been purchased with a view to providing emergency accommodation. 'The understanding was planning was in place (for the hotel). Some planning issues arose in relation to it. I understand that the council and others are now working to look at how that property can be used for social housing at this point in time,' he said. Fianna Fáil's Paul McAuliffe said the vacancy of such a property, given the struggles of the Dublin Regional Homeless Executive to provide accommodation and that the department had funded the purchase, is 'questionable'. In response, Mr Doyle said he is 'unhappy with that'. He said, however, that the various recommendations made by the Comptroller and Auditor General on foot of the scandal – which suggested that oversight of grant funding to housing bodies be strengthened and that approval from the Department of Public Expenditure be obtained in each instance – have now been fully implemented. The Trust had caused opprobrium among the committee members in advance by declining to attend to give evidence. Mr Doyle, while declining to comment on that decision, did say that the 2023 accounts for the charity should have been published by now. The charity had said it may be in a position to give evidence at PAC once that publication has occurred. Read More
