Health Service Executive - Dublin Mid Leinster (Register of Users)

Last updated April 2019

Does your organisation use the PPSN at present?

Yes

If so, for what purpose?

In the application of the following Schemes:

• Blind Welfare Allowance
• Domiciliary Care Allowance
• Dental Schemes
• Drug Payment Scheme
• European Health Insurance Cards
• Medical Cards/GP Visit Cards
• Home Help Service/Home Support Service
• Immunisation Services
• Inpatient Services
• Institutional Assistances Services
• Long-Term Illness Scheme
• Maternity Cash Grant
• Mobility Allowance
• Motorised Transport Scheme
• Fair Deal
• Ophthalmic & Aural Services
• Outpatient Services
• Primary Medical Certificate
• In-patient Services Mental Health
• National Cancer Screening Programme
• Oncology Drugs Management
• Bowel Cancer Screening
• Diabetic Screening
• Cervical Smear Screening

For the assigning of a unique number under the Individual health Identifier Act 2014.

Does your organisation exchange the PPS number with any other body? If so please name the relevant bodies and the purpose(s) of the exchange?

Yes

• Department of Social Protection for the purposes of administration of schemes
• Revenue Commissioner for the purposes of calculation of taxes and deductions
• General Registers Office for the purpose of registration of births, deaths and marriages

Does your organisation have any other plans involving the use of the PPS number?

Not at present

There is a duty to ensure compliance with the principles of processing personal data which are set out in Article 5(1) and 5(2) of the GDPR. These principles are summarised as follows:-

• process it lawfully, fairly, and in a transparent manner
• collect it only for one or more specified, explicit and legitimate purposes, and do not otherwise use it in a way that is incompatible with those purposes
• ensure it is adequate, relevant and limited to what is necessary for the purpose it is processed
• keep it accurate and up-to-date and erase or rectify any inaccurate data without delay
• where it is kept in a way that allows you to identify who the data is about, retain it for no longer than is necessary
• keep it secure by using appropriate technical and/or organisational security measures
• be able to demonstrate your compliance with the above principles and
• respond to requests by individuals seeking to exercise their data protection rights (for example the right of access

Have you measures in place to ensure that the Public Service Identity data you hold/collect whether in electronic or written format is in line with the GDPR Principles described above?

Yes measures are in place throughout the HSE to ensure that the public services identity data we hold/collect in electronic or written format is safe and secure and that it is only assessable on a need to know basis and processed in connection for the purpose for which it has been provided.

All staff are made aware of the Data Protection Acts 1988-2018 and the General Data Protection Regulation (GDPR) through Data Protection Awareness training which is provided both at induction stage and on an on-going basis.

All staff are required to comply with the principles of Data Protection and have been circulated with a Data Protection Guide which they must read and confirm that they understand what is required of them as an employee to ensure compliance with Data Protection Legislation.

There are processes in place within the HSE to deal with Subject Access Requests and for the reporting and follow-up of any data breaches in line with GDPR.