DPC concludes investigation into facial matching technology in public services (dataprotection.ie)

• Agreement between DPC and DSP on data processing for SAFE2 and PSC
• Non-PSI data must be deleted within six months of receipt
• DSP to develop program to delete old data within 12 months
• Alternative identity verification without PSC must be offered
• Separate investigations into facial templates and MyGovID ongoing

"Ireland's Data Protection Commission (DPC) and the Department of Social Protection have reached an agreement regulating the use of facial matching technology and the retention of personal data in the SAFE2 registration process and the Public Services Card (PSC). The Department will delete non-PSI data within six months, develop a program to delete old data, and update its privacy statement. Separate DPC investigations into biometric facial templates and MyGovID continue."