The Lawful Processing Conditions of Personal Data Irish Act, also known as the Data Protection Act 1988, is an Irish legislation that regulates the processing of personal data in Ireland. The act lays down the rules for the collection, storage, and use of personal data, including sensitive personal data, by organizations operating in Ireland.
The act provides for a number of lawful processing conditions, which must be met for an organization to be able to process personal data. These conditions include obtaining the individual's consent for the processing, processing for the performance of a contract with the individual, processing for the compliance with a legal obligation, processing for the protection of the vital interests of the individual, and processing for the performance of a task carried out in the public interest.
The act also imposes obligations on organizations in terms of data security, including the need to implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.
In summary, the Lawful Processing Conditions of Personal Data Irish Act is a key piece of legislation that sets out the rules for how personal data must be treated in Ireland, with the aim of protecting the privacy rights of individuals and ensuring that organizations handling personal data do so in a responsible and lawful manner.
Section 2(a) of the Irish Data Protection Act
The following are Valid Lawful processing conditions for processing personal data.
- Consent of the Data Subject
- Contractual necessity
- Non-contractual legal obligation
- Prevention of injury or damage to health
- Prevention of loss or damage to property
- Vital interests of the Data Subject
- Administration of Justice
- Performance of a lawful function
- Performance of a Government or Minister’s function
- Performance in the public interest
- Legitimate interest of the Data Controller
