The Office of the Data Protection Commission to begins an investigation into how DCC
Just heard on Newstalk that the Data Protection Commissioner has begun an investigation into the transfer of customer details to Greyhound Waste.
According the to Newstalk report the investigation is as a result of complaints from members of the public. It will be very interesting to see the outcome of this.
The Greyhound privacy policy states that:
Greyhound will not sell, trade, rent, or otherwise disclose your personal information to anyone outside of Greyhound.
DCC's policy does not make that undertaking and simply states:
Dublin City Council will not disclose Personal Data to third parties unless the Data Subject has consented to this disclosure or unless the disclosure to the third party is necessary for the Council’s functions (in such circumstances, the third party is bound by similar data protection requirements), or is otherwise required by law.
Now will the sale of data to a third party in a commercial transaction pass the test of "unless the disclosure to the third party is necessary for the Council’s functions" and/or is this compatible with the data protection legislation.
According to the Indo the GH claims it knows nothing about the investigation and claims to be fully compliant.
In the IT article GH says that it will cooperate with any investigation.
The "disposal" of the waste collection is shrouded in secrecy and the City Manager has, to date, refused to answer questions put to him both by individual citizens and their elected representatives.
I wonder will the next step the an investigation by the Competition Authority into how Greyhound was selected and Ernst & Young's involvment in the process.