UN experts contact Govt over independent data protection

UN experts have reached out to the Irish Government regarding the necessity of an independent data protection authority. A report compiled by the UN Special Rapporteurs on the independence of judges and lawyers, as well as the right to privacy, emphasizes the importance of independent data protection authorities and effective access to courts in protecting the right to privacy, especially in the presence of influential technology corporations.

Given that several multinational tech companies have their European headquarters in Ireland, the Irish Data Protection Commission (DPC) serves as the primary supervisory authority for numerous cross-border cases under the EU General Data Protection Regulation (GDPR). Consequently, its decisions impact individuals throughout the European Union.

The report underscores that independence is initiated with transparent and meticulous appointment procedures. Under GDPR, supervisory authorities are mandated to act independently, with members appointed through transparent processes. Selection processes should employ objective, specialized criteria, incorporate impartial selection panels, and identify any potential conflicts of interest before an appointment is made, according to the experts.

While private-sector employment does not inherently jeopardize independence, professional relationships, financial interests, and ongoing obligations necessitate thorough scrutiny and, when applicable, disclosure and recusal safeguards. The Special Rapporteurs are currently in contact with the Irish Government to address their concerns.

Acting as independent human rights experts appointed by the United Nations Human Rights Council, Special Rapporteurs remain detached from any government or organization, and their opinions do not necessarily reflect those of the UN. In September of the previous year, the Government announced the appointment of Niamh Sweeney as the third Data Protection Commissioner.

Prior to her role, she held senior positions at tech companies like WhatsApp and Facebook, both owned by Meta. Privacy advocacy groups, including the Irish Council for Civil Liberties, lodged complaints with the Irish Government and the European Commission, expressing worries about Sweeney's prior employment at these companies. She has stated that as Data Protection Commissioner, she will not investigate any matters at Meta that transpired during her tenure there.

The Department of Justice has previously affirmed its full satisfaction with the appointment process that led to Sweeney's selection.