SI 220/2016

WHEREAS section 2A of the Data Protection Act 1988 (No. 25 of 1988) provides that personal data shall not be processed by a data controller unless section 2 of that Act is complied with and at least one of a number of conditions specified in that section is met;

AND WHEREAS subsection (1)(d) of the said section 2A provides that one of those conditions is where the processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the fundamental rights and freedoms or legitimate interests of the data subject;

AND WHEREAS subsection (2) of the said section 2A provides that the Minister may, after consultation with the Data Protection Commissioner, by regulations specify particular circumstances in which subsection (1)(d) of section 2A is, or is not, to be taken as satisfied;

AND WHEREAS the processing by an air carrier or a sea carrier of certain personal data in respect of which it is a data controller, for the purposes of the disclosure of that data, in the circumstances set out in these regulations, to the Home Secretary of the United Kingdom, is necessary for the purposes of the legitimate interests pursued by that carrier and is also necessary for the purposes of the legitimate interests pursued by the Home Secretary;