Privacy Notice for Local Authority Information Sharing

Privacy Notice for Local Authority Information Sharing:

This Privacy Notice is issued by the National Standards Authority of Ireland (“NSAI”), with primary offices at 1 Swift Square, Northwood, Santry, Dublin 9, D09 A0E4. NSAI is Ireland’s official standards body, operating under the National Standards Authority of Ireland Act, 1996 (as amended). Our statutory functions include arranging for the testing and analysis of commodities, particularly in relation to certification.

 

Purpose of this Notice:

The purpose of this notice is to inform you of the data that we will collect and use in order to evaluate the impact of pumped cavity wall insulation on homes affected by defective concrete blocks (“DCB”). This evaluation is conducted as part of our statutory functions and in response to a request from the Department of Housing, Local Government and Heritage.

We are committed to protecting your privacy and ensuring the security of your personal data. This privacy notice explains how we collect, use, and share your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Sharing and Governance Act 2019.

If you have any questions about our use of your personal data, you can contact our Data Protection Officer at DataPrivacy@nsai.ie

 

Personal Data We Collect:

We may collect and process the following categories of personal data:

• Property Information: Addresses, Eircodes, and technical details of properties affected by DCB.
• Owner Information: Names, phone numbers, and email addresses of property owners.
• Building Condition Assessment Reports (BCAR): Detailed reports on the condition of affected properties.

Purpose of Data Processing:

We collect and process personal data to evaluate the impact of pumped cavity wall insulation on homes affected by defective concrete blocks (DCB). This evaluation is conducted as part of our statutory functions and in response to a request from the Department of Housing, Local Government and Heritage.

Legal Basis for Processing:

Our processing of personal data is based on the following legal grounds:

• Public Interest: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in NSAI (GDPR Art 6.1(e)).
• Scientific Research: Personal data may be processed for scientific research purposes, subject to suitable and specific measures to safeguard the fundamental rights and freedoms of data subjects (Data Protection Act 2018, section 42).
• Other specific legislative provisions: Other legislative provisions supporting this data sharing include:

• the Remediation of Dwellings Damaged by the use of Defective Concrete Blocks Act 2022; and
• the Remediation of Dwellings Damaged by the use of Defective Concrete Blocks Regulations 2023 (S.I. No. 347 of 2023).

Data Sharing:

NSAI may obtain your personal data from Clare County Council and Limerick City and County Council as part of our evaluation process. These councils hold the pertinent data necessary for our research.

 

Security and Safeguards of Personal Data:

We implement a variety of technical and organisational measures to protect your personal data against unauthorised access, unlawful processing, accidental loss, destruction, damage, or unlawful disclosure. These measures include:

• Encryption of data during transmission and at rest
• Access controls and permissions management
• Regular audits and monitoring
• Staff training and awareness programs
• Secure storage and deletion protocols

Only staff members who are suitably authorised can access your personal information where that information is relevant to the performance of their duties in accordance with legal or regulatory obligations. This includes third parties who are under contract to us. In the event of a data breach, NSAI will issue breach notifications as may be required under law.

Recipients of Data:

As the primary recipient, NSAI will use the data to evaluate the impact of pumped cavity wall insulation on homes affected by defective concrete blocks.

As disclosing parties, Clare County Council and Limerick City and County Council, will share relevant data with NSAI.

NSAI will submit a report to the Department of Housing, Local Government and Heritage and am NSAI Technical Committee outlining its findings of the scientific research (the “Report”). The Report will not contain any of your personal data.

NSAI does not sell or hire your personal information to third parties for their own use or for marketing purposes.

 

Data Retention:

We will not hold your personal data for longer than is necessary. We retain your personal data for as long as we need it for the purposes described in this Notice, or to comply with our obligations under applicable law and, if relevant, to deal with any claim or dispute that might arise. We do not record or keep card payment information. Personal data collected by us is managed and retained in accordance with our Data Retention and Destruction Policy.

 

Your Rights:

Where personal data is processed or held by us, the following rights apply with regard to your data - 

• You can request us to provide you information on any personal data we hold about you and you can request us to provide you with a copy of that data subject to exceptions provided in law.
• You can object to the processing or request erasure of your personal data, unless the processing is required by law.
• Where the personal data we hold about you is incorrect or incomplete you can contact us, and we will correct or update the information or direct you to the organisation who can correct or update the information.
• Where we hold your data and it is processed by automated means you may be entitled to be provided with a copy of that data in a structured machine-readable format.
• Where you have given your consent only to us to use your personal data you can withdraw that consent at any time.  

 

Data Protection Contacts:

For security purposes, we may require verification of identity before providing access to personal information. If you wish to make a Data Protection request or have a question about this policy, you can contact the NSAI Data Protection Officer by email at DataPrivacy@nsai.ie or by post to – 

 

Data Protection Officer
National Standards Authority of Ireland
1 Swift Square, Northwood, Santry, Dublin 09, D09 A0E4, Ireland

 

If you are not satisfied with the way we have processed a request to us about your personal data or if you or a complaint about the way NSAI has collected, processed, used or disclosed your personal data, you can contact the Irish supervisory authority for data protection at – 

 

Office of the Data Protection Commissioner. 
Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland. 
Phone +353 (0761) 104 800 | LoCall 1890 25 22 31 | email info@dataprotection.ie

 

Changes to this Privacy Notice:

We will post any changes to this privacy notice on our website in order to inform you of the personal data we collect, how it is used and the circumstances, if any, it can be disclosed.

If we decide to use personal data in a significantly different manner to that stated in this Privacy Statement or for a different purpose for which it was collected, we will notify you of such change and if appropriate you will be given a choice as to whether we use your information in the new manner