Ireland’s welfare department fined over biometric data collection

It’s always interesting to see how data protection authorities handle violations by other public authorities. In this case, Ireland’s Data Protection Commission (DPC) has fined the Department of Social Protection (DSP) €550,000 for unlawfully collecting biometric data as part of the Public Services Card (PSC) program. 

According to the DPC, the DSP had collected and stored biometric facial templates for approximately 70% of the Irish population. An in-depth investigation spanning several years revealed that the DSP's conduct lacked a valid legal basis, making it alarmingly intrusive. During this large-scale data collection, individuals were not provided with clear, transparent information about how their data was being processed. 

The DPC has ordered the DSP that if it does not provide an adequate legal basis for this data collection within nine months, it must refrain from processing biometric data through the Safe 2 registration process. 

While these revelations may be disturbing, it is encouraging to see that authorities worldwide are examining their colleagues' work seriously and prioritizing data protection.

‍