Communications (Retention of Data) (Amendment) Act 2022

Insertion of sections 12A to 12J in Principal Act

8. The Principal Act is amended by the insertion of the following sections after section 12:

“Offences

12A. (1) A person who contravenes sections 3(1), 3A(7), 3B(1), 6(8), 6F(2), 7A(15), 7B(23), 7C(14) or 7D(23) shall be guilty of an offence.

(2) A person guilty of an offence under this section shall be liable—

(a) on summary conviction, to a class A fine or imprisonment for a term not exceeding 12 months or both, or

(b) on conviction on indictment, to a fine not exceeding €500,000 or imprisonment for a term not exceeding 5 years or both.

(3) In proceedings for an offence under subsection (1), it shall be a defence for a person against whom such proceedings are brought to prove that the person took all reasonable steps and exercised all due diligence to avoid the commission of the offence.

(4) Where an offence under this section is committed by a body corporate and is proved to have been committed with the consent or connivance of, or to be attributable to any neglect on the part of, a person being a director, manager, secretary or other officer of the body corporate or a person who was purporting to act in any such capacity, that person, as well as the body corporate, shall be guilty of that offence and shall be liable to be proceeded against and punished as if he or she were guilty of the first-mentioned offence.

Amendment of Schedule 2

12B. (1) The Minister may, following consultation with the Minister for Environment, Climate and Communications and in accordance with this section, by regulation amend Schedule 2, where he or she is satisfied that it is necessary to do so in order to ensure that the matters specified in the Schedule adequately reflect developments in electronic communications technology and include data transmitted by means of such technology.

(2) The Minister in exercising the power under subsection (1), may consult with such persons possessing expertise in the area of electronic communications technology as he or she considers appropriate.

Guidelines

12C. The Minister may issue guidelines—

(a) to persons with respect to the making of applications under sections 7A, 7B, 7C and 7D, and

(b) to facilitate compliance by service providers with preservation and production orders.

Retention of data

12D. A service provider who is required under section 3(1), 3A(5), 3B(1), 7A(11) or 7B(10) to retain or, as may be appropriate, preserve data shall retain or preserve, as the case may be, those data—

(a) in such a way that they may be disclosed without undue delay pursuant to a disclosure request, and

(b) in accordance with regulations, if any, under section 12F(2)(a).

Criteria for specification of geographic area

12E. A person who, under a provision of this Act, specifies a class or classes of Schedule 2 data by reference to a particular geographical area or areas, shall do so by reference to criteria that are objective and non-discriminatory and, for that purpose, shall have regard to the criteria specified in regulations under section 12F(2)(b) (if any).

Regulations

12F. (1) The Minister may by regulations provide for any matter referred to in this Act as prescribed or to be prescribed.

(2) The Minister may by regulations provide for one or more of the following:

(a) the technical requirements to be met by a person who is obliged under this Act to retain or preserve data, including the requirements to be met so as to ensure that data so retained or preserved, when required under this Act to be disclosed—

(i) may be disclosed without delay, and

(ii) are of sufficient quality to be used for the purposes for which the disclosure is required;

(b) the criteria, which shall be objective and non-discriminatory, to which a person shall have regard when specifying a class or classes of Schedule 2 data by reference to a particular geographic area, which may include:

(i) the rate of crime in an area;

(ii) the number of persons normally present in the area;

(iii) the presence in the area of strategic infrastructure;

(c) the procedures for making an application under sections 6, 6A, 6B, 6C, 6D, 6E, 6F, 7A, 7B, 7C or 7D.

(3) Without prejudice to any provision of this Act, regulations under this section may contain such incidental, supplementary and consequential provisions as appear to the Minister to be necessary or expedient for the purposes of the regulations.

(4) Every regulation made by the Minister under this Act shall be laid before each House of the Oireachtas as soon as may be after it is made and, if a resolution annulling the regulation is passed by either such House within the next 21 days on which that House sits after the regulation is laid before it, the regulation shall be annulled accordingly, but without prejudice to the validity of anything previously done thereunder.

Notification of data subject

12G. (1) Subject to subsection (2), where Schedule 2 data have been disclosed to a person pursuant to a requirement under section 6F(1), 7C or 7D, the Garda Commissioner, the Chief of Staff of the Defence Forces, the Chairman of the Revenue Commissioners, the Chairperson of the Competition and Consumer Protection Commission, as may be appropriate, shall, in accordance with regulations under this section, cause to be given to the person to whom the data relate a notice in writing informing him or her of the disclosure of the data concerned.

(2) Without prejudice to the generality of subsection (1), regulations under this section may provide for any one or more of the following:

(a) the form of the notice to be given under subsection (1);

(b) the information to be provided in that notice, including—

(i) the date on which the Schedule 2 data were disclosed pursuant to the requirement concerned,

(ii) the date on which the requirement was made, and

(iii) the date of the authorisation under section 6A or 6B, the production order under section 7C or temporary production order under section 7D, in respect of the data;

(c) the persons who shall be consulted before such a notice is given in accordance with this section;

(d) the determination of the point in time and circumstances in which a notice should be given having regard to the overriding consideration that this section shall not operate to—

(i) impede the prevention, detection, investigation or prosecution of any serious offence,

(ii) undermine the security of the State, or

(iii) endanger the life or personal safety of any person;

(e) the classes of information that shall not be included in a notice under subsection (1) having regard to the overriding consideration referred to in paragraph (d);

(f) the categories of persons (other than the person to whom the data relate) whose interests are materially affected by the disclosure of traffic and location data pursuant to a disclosure requirement.

(3) This section shall not apply to Schedule 2 data that have been disclosed in compliance with a disclosure requirement made pursuant to—

(a) an authorisation issued under section 6A(5),

(b) an authorisation affirmed or varied under section 6B(11),

(c) a production order made under section 7C(3), or

(d) a production order affirmed or varied under section 7D(17).

Service of documents

12H. (1) A notice or other document that is required to be served on or given to a person under this Act shall be addressed to the person concerned by name and shall be so served on or given to the person—

(a) by electronic means,

(b) by delivering it to the person,

(c) by leaving it at the address at which the person ordinarily resides or carries on business or, in a case in which an address for service has been furnished, at that address,

(d) by sending it by post in a prepaid registered letter or by any other form of recorded delivery service to the address referred to in paragraph (c).

(2) For the purposes of this section, a company within the meaning of the Companies Act 2014 is deemed to be ordinarily resident at its registered office, and every other body corporate and every unincorporated body of persons shall be deemed to be ordinarily resident at its principal office or place of business.

Processing of personal data

12I. Personal data that are disclosed to a member of the Garda Síochána, a member of the Permanent Defence Forces, an officer of the Revenue Commissioners or an officer of the Competition and Consumer Protection Authority, pursuant to a requirement under section 6(1), 6E(1), 6F(1), 7C(11) or 7D(10) made for the purposes of the prevention, detection, investigation or prosecution of criminal offences, shall be processed in accordance with Part 5 of the Data Protection Act 2018 .

Provisions relating to authorising judge

12J. (1) The President of the District Court shall designate such and so many judges of the District Court to be authorising judges for the purposes of this Act.

(2) An application to an authorising judge under sections 6A, 6B, 6C, 6D, 7A, 7B, 7C or 7D may be made—

(a) whether or not the service provider in respect of whom the authorisation is issued is resident or located in the District Court district to which the authorising judge stands assigned, and

(b) whether or not the data to which the authorisation applies is retained by the service provider within the District Court district to which the authorising judge stands assigned.”.