Mater Misericordiae Hospital, Dublin (Register of Users)

Updated June 2019

From : Department of Social Protection

Does your organisation use the PPSN at present?

Yes

If so, for what purpose?

For PAYE and PRSI purposes

Does your organisation exchange the PPS number with any other body? If so please name the relevant bodies and the purpose(s) of the exchange?

Yes with the Revenue Commissioners and the HSE.

Does your organisation have any other plans involving the use of the PPS number?

There is a duty to ensure compliance with the principles of processing personal data which are set out in Article 5(1) and 5(2) of the GDPR. These principles are summarised as follows

process it lawfully, fairly, and in a transparent manner
collect it only for one or more speciﬁed, explicit and legitimate purposes, and do not otherwise use it in a way that is incompatible with those purposes
ensure it is adequate, relevant and limited to what is necessary for the purpose it is processed
keep it accurate and up-to-date and erase or rectify any inaccurate data without delay
where it is kept in a way that allows you to identify who the data is about, retain it for no longer than is necessary
keep it secure by using appropriate technical and/or organisational security measures
be able to demonstrate your compliance with the above principles and
respond to requests by individuals seeking to exercise their data protection rights (for example the right of access

Have you measures in place to ensure that the Public Service Identity data you hold/collect whether in electronic or written format is in line with the GDPR Principles described above?

Yes. The legal basis for processing personal data for Finance and HR purposes is Article 6(1) c – Compliance with a legal obligation and Revenue and Department of Social Protection law. Data is stored on the Perfast system, which is only accessible to HR and Finance staff. The Data Protection Office and the HR department facilitates access to personal data held by the MMUH.