|
|
Breithníodh i gcinneadh an Choimisinéara Cosanta Sonraí i mí Dheireadh Fómhair 2016 gur sháraigh an rialtóir sonraí Alt 2(1)(a) agus Alt 2D(1) de na hAchtanna um Chosaint Sonraí 1988 agus 2003, óir go mba cheart go soláthródh an rialtóir sonraí don ghearánaí na cuspóirí a bhain le bailiú agus le próiseáil na sonraí bithmhéadracha, an tréimhse a gcoinneofaí iad agus an bealach ina gcoinneofaí iad, ina mbainfí leas astu, agus ina nochtfaí iad le tríú páirtithe dá mb’infheidhmithe.
|
|
|
Having regard to the information supplied to us by the operators of the residential care home and, in particular, the vulnerability of the clients involved and the nature of the complainant’s duties, we formed the view that no breach of the Data Protection Acts 1988 and 2003 had occurred. In this case, we considered that the processing of the complainant’s data, by way of the photograph and audio recording made by the supervisor, and the subsequent disclosure of these to the employer was necessary for the purposes of the legitimate interests pursued by the data controller, the employer, under Section 2A(1)(d) of the Data Protection Acts 1988 and 2003. This legal basis for processing requires the balancing of the data controller’s (or a third party’s or parties’) legitimate interests against the fundamental rights and freedoms or legitimate interests of the data subject, including an evaluation of any prejudice caused to those rights of the data subject.
|