Data Protection

The EU General Data Protection Regulation entered into effect on 25 May 2018.  The purpose for which the International Protection Office uses personal data provided to it by applicants, and the rights of applicants with regard to that data, are explained in the IPO Privacy Statement (IPO (PP) 52 Rev 5) which can be viewed here.

The International Protection Office, Immigration Service Delivery (ISD, Department of Justice, Home Affairs and Migration) is committed to protecting the rights and privacy of all individuals in accordance with the EU General Data Protection Regulation, 2016/679 (GDPR) as given further effect in Part 3 of the Data Protection Act 2018.

Under the General Data Protection Regulation (GDPR), personal data is defined as

“any information relating to an identified or identifiable natural person (data subject)”.

This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number (e.g. PPSN), location data or online identifier and covers all electronic, manual and image data which may be held on computer or on manual files.

1. Processed in a way that is lawful, fair and transparent
2. Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
3. Adequate, relevant and is limited to what is necessary
4. Accurate and kept up to date
5. Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; and
6. Processed in a manner that ensures appropriate security of the data.

The Department’s Data Protection Policy sets out how DoJ secures and manages personal data in accordance with the six GDPR principles noted above.  Department of Justice, Home Affairs and Migration Data Protection Policy.

The Data Protection Officer for the Department of Justice, Home Affairs and Migration is Ms Tara Storey.

Any data protection queries relating to personal data held by the International Protection Office should be directed to the Department’s Data Protection Support and Compliance Office (DPSCO).  The DSPCO can be contacted by phone on 01-6028601 or by e-mail to [email protected]

Applicants for international protection are required to provide personal data which may be shared within Immigration Service Delivery and other government departments as permitted by law. Click here for our DOJ Data Protection Policy and IPO GDPR Privacy Statement.

By consenting to allow the IPO and Immigration Service Delivery communicate with you by email, you will receive all official documents relating to your immigration application and immigration status, including recommendations and decisions that affect your case by email. It is your responsibility to check your email and take any action required.

The use of electronic communications for the service of legal documents is in accordance with Section 6 of the Immigration Act, 1999, Section 18 of the Immigration Act 2004 and Section 5 of the International Protection Act 2015, as amended by the Courts and Civil Law (Miscellaneous Provisions) Act 2023.

You have the right to withdraw your consent to the use of electronic communications at any time. This will not affect the processing of your application. Please contact [email protected].

Among the rights conferred by the GDPR on ‘data subjects’ is the right to obtain a copy of their personal data which is being processed by the International Protection Office, Irish Naturalisation and Immigration Service, Department of Justice, Home Affairs and Migration.  In order for the Department to identify and locate the personal data sought, you should complete and return our Subject Access Request Form (SAR) ensuring that you provide, in so far as is possible, details of your interaction with our various Offices and Divisions, as well as any specific identifiers (e.g. any previous addresses, date of birth, reference number from previous contact with the Department etc.). In addition, as we need to verify the identity of anyone making a Subject Access Request, you will need to provide us with specific forms of identification (details contained in the SAR form).  Your Subject Access Request will be responded to within one month of the date of receipt or, where difficulty arises in the verification of your identity, within one month of identity verification.

To make a Subject Access Request please complete this form Department of Justice, Home Affairs and Migration Subject Access Request Form (PDF) and return it by email to [email protected] or alternatively by post to:

Data Protection Support & Compliance Office
Department of Justice, Home Affairs and Migration
51 St Stephen’s Green
Dublin 2.
D02 HK52