General Data Protection Policy for The Adoption Authority of Ireland

Abstract

This Policy sets out the obligations of the Adoption Authority of Ireland (the “Adoption Authority”) regarding data protection and the rights of data subject (“data subjects”) in respect of their personal data under EU Regulation 2016/679 General Data Protection Regulation (“GDPR”). The GDPR defines “personal data” as any information relating to an identified or identifiable natural person (a “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. This Policy sets the Adoption Authority’s obligations regarding the collection, processing, transfer, storage, and disposal of personal data. The procedures and principles set out herein must be followed at all times, by staff/employees, board members, agents, contractors, or other parties working on behalf of the Adoption Authority.