Data Protection

This section of the website provides information on the data practices of the Citizens Information Board (CIB) and of the companies funded and supported by CIB.

CIB provides or supports the provision of information, advice, money advice and advocacy services. We fund a range of organisations, including Citizens Information Services, Money Advice and Budgeting Services, the Citizens Information Phone Service, the National Advocacy Service for People with Disabilities and the Sign Language Interpreting Service.

These services are independent limited companies, overseen by a regional manager and a board of directors. Data Protection queries or requests related to these companies should be directed to the data protection contact of that company, outlined in each of their Data Protection Notices.

Data Protection Notice for Users of Our Services

Who are we?

We are the Citizens Information Board, a statutory body governed by the Comhairle Act 2000, the Citizens Information Act 2007 and the Social Welfare (Miscellaneous Provisions) Act 2008.

We provide or support the provision of information, advice, money advice and advocacy services. We fund a range of organisations, including Citizens Information Services, Money Advice and Budgeting Services, the Citizens Information Phone Service, the National Advocacy Service for People with Disabilities and the Sign Language Interpreting Service.

This notice sets out the basis on which any personal data we collect from you, or from others, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

For the purpose of the Data Protection Acts 1988-2018, the data controller is the Citizens Information Board.

Our Data Protection Officer can be contacted on: dataprotection@ciboard.ie.

What personal information do we collect from you?

We may collect a range of personal information from you, depending on your circumstances and the services you require. You may give us personal data by:

What information about you do we obtain from others?

We would not expect to obtain information about you from other organisations for the purposes of providing services.

Please note, however, that the Citizens Information Board processes personal data on behalf of the organisations it funds and supports, including the Citizens Information Services and the Money Advice and Budgeting Services.

Why do we collect this information?

We collect the information in order to provide you with our services. We may use this information:

The legal bases for the processing of your data are:

The legal basis for the processing of your special category data is:

Who do we share this information with?

We may share your personal data with other entities funded by the Citizens Information Board and with public and private organisations in order to provide you with our services.

We include at Schedule 1 (below) a list of entities and categories of entities with which your personal data may be shared.

In addition, we may disclose your personal information to third parties:

How long do we keep hold of your information?

The time periods for which we retain your information depends on the type of information and the purposes for which we use it. We will keep your information for no longer than is required or permitted.

Do we transfer your information outside the European Union or European Economic Area?

In limited cases, we may transfer your data outside the EEA in line with GDPR. This may be done under the basis of an ‘Adequacy Decision’ in accordance with Article 45 GPDR. In the absence of such a decision, we rely on appropriate safeguards, including the assessment of need or supplementary measures, in accordance with Article 46 GDPR. Alternatively, we will transfer the personal data only when a derogation under Article 49 GDPR is applicable.

What are your rights with respect to your personal data?

You have the following rights:

Where our processing of your personal data is based on your consent to that processing, you have the right to withdraw that consent at any time but any processing that we have carried out before you withdrew your consent remains lawful. The withdrawal of your consent may mean the suspension or cessation of the provision of the services that we have been providing you up until the date of withdrawal of consent on the basis that we are no longer able to provide these services without your personal data.

You may exercise any of the above rights by contacting our data protection contact at any of the contact points listed above.

You may lodge a complaint with your supervisory authority with respect to our processing of your personal data. The supervisory authority in Ireland is the Data Protection Commission. The website is www.dataprotection.ie.

What will happen if we change our Data Protection Notice?

This notice may change from time to time, and any changes will be posted on the www.citizensinformationboard.ie website and will be effective when posted.

This notice was last updated in December 2023

How can you contact us?

Our Data Protection Officer can be contacted on: dataprotection@ciboard.ie.

Schedule 1

We have set out below a list of third parties with whom we may share your data.

Third party Description
Any legal successors to the Citizens Information Board Where the Citizens Information Board transfers its business to another organisation or merges with another organisation.
Other entities funded by the Citizens Information Board Where we refer your case to another entity funded by the Citizens Information Board in order to provide services.

Where we work with other Citizens Information Services and the Citizens Information Phone Service to provide a national callback service.

ICT providers Where ICT services such as network facilities, website hosting, hardware, software, email, network storage, case management systems, analytics services, search services, digital maps services or similar are provided by or maintained by a third party.
Archiving companies Where we archive our files in facilities provided by a third party.
Shredding companies Where our files are securely destroyed by a third party.