DPC concludes investigation into Public Services Card data processing (dataprotection.ie)

• DEASP had legal basis for benefit claimants but not others.
• Section 263 SWCA 2005 insufficient for non-benefit claimants.
• Transparency and data retention shortcomings identified.

"The Irish Data Protection Commission (DPC) published a report in August 2019 on the legality of personal data processing in the Public Services Card (PSC) system. It found that the Department of Employment Affairs and Social Protection (DEASP) lacked a legal basis for processing data of non-benefit claimants. The report also criticized transparency failures and inadequate data retention periods."