Privacy Statement

Privacy Statement for HSE Digital Transformation Website (



The Health Service Executive (HSE) Digital Transformation Division in the Office of the Chief Information Officer (OoCIO) owns and runs the website. The HSE needs to collect and use certain information about you when you use any of the HSE’s online services.

The HSE is committed to protecting your privacy and takes the security of your information very seriously.

The HSE aims to be clear and transparent about the information we collect about you and how we will use that information.

This policy will set out the following:

  • The Data Controller
  • The Data Protection Officer (DPO)
  • What Personal Data we Collect
  • What we use your Personal Data for
  • How long will we hold onto your Personal Data
  • Who will have access to your Personal Data
  • International data transfers
  • Your Rights
  • Complaints

The Data Controller

The Health Service Executive (HSE) is the Data Controller for all personal data which is collected and used by the website. A Data Controller is the legal entity which determines how and why personal data is collected and used.

The HSE’s headquarters is located at Dr. Steevens Hospital, Steevens Lane, Dublin 8, Ireland.

The Data Protection Officer (DPO)

The HSE has appointed a Data Protection Officer to oversee the HSE’s compliance with its data protection obligations. The HSE Data Protection Officer (DPO) can be contacted directly, here:

Email address: dpo @

What Personal Data we Collect

Personal data means any information relating to you which allows the HSE to identify you, such as your name & address, contact phone numbers and email address.

Most areas of the website can be accessed by you without the need for you to provide any of your personal data. Some areas, though, require you to submit your name, email address, and other contact details, for example when you use the contact us form on the website to give feedback.

The HSE may collect and use the following personal data about you:

  • Your name and email address
  • Your IP address
  • The communications you exchange with the HSE as part of providing feedback
  • Information about your use of this website

What we use your Personal Data for

Any personal data we collect from you on this website will only be used by the HSE for the following purposes:

  • Analysis of visitor traffic to and usage of our website
  • To contact you in relation to feedback you have provided.
  • To distribute various HSE newsletters and information notices regarding HSE health campaigns and promotions which the HSE feels may be of benefit to you.
  • To gain your feedback on this website

The HSE will not use the data we collect about you on the website for any other purposes without first contacting you and seeking your consent

The HSE may use anonymised data from this website for the purposes of analysing, planning and improving the service. This anonymised data will not include any of your personal data

How long will we hold onto your Personal Data

The HSE will only retain your personal data for as long as it is necessary to fulfil the purpose it is being processed for. All personal data collected by the HSE is retained in accordance with the HSE Record Retention Policy. The HSE Record Retention Policy is published on the HSE website at:

When the HSE no longer needs your personal data, they securely delete or destroy your personal data.

Who will have access to your Personal Data

Only HSE staff, agents and suppliers who are directly involved with the management of the website shall have access to your personal data which is collected by this website.

All HSE staff, agents and suppliers which may have access to personal data shall be bound to the HSE via confidentiality agreements and are obliged to keep your personal data secure, and to use it only for the purposes specified by the HSE.

Will my personal data be transferred outside of the European Economic Area (EEA)

The HSE uses Google Analytics to collect information about your use of this website and part of this information includes your IP address which is considered personal data. However, the HSE has anonymised IP addresses for this website which means that no individual can be identified by the IP address.

The HSE does not transfer any other personal data about you outside the EEA. If the HSE decides to transfer your personal data outside the EEA they shall ensure the provisions of Chapter V of the General Data Protection Regulation (GDPR) are complied with.

What are your Rights

Under certain circumstances, by law you have the right to

  • Right of access – you have the right to request a copy of the information that we hold about you.
  • Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
  • Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
  • Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
  • Right of portability – where certain conditions apply, you have the right to have the data we hold about you transferred to another organisation.
  • Right to object – you have the right to object to certain types of processing such as direct marketing.
  • Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
  • Right to review: in the event that the HSE’s refuses your request under rights of access, we will provide you with a reason as to why.
  • Withdraw your consent – where you have consented to receiving emails or newsletters you may withdraw your consent at any time

If you wish to exercise any of these rights, then please submit a request, to HSE Consumer Affairs at:

When submitting a request, the HSE may need information from you to confirm your identity.

Once your identity has been confirmed, the HSE will supply you with your information free of charge, however, we may charge a reasonable fee if believe your request is clearly unfounded, excessive or repetitive.

Making a complaint

In the event that you wish to make a complaint about how your personal data is being processed by the HSE, or how your complaint has been handled, you have the right to lodge a complaint directly with the Data Protection supervisory authority and the HSE Data Protection Officer:

Data Protection Supervisory Authority – (

The HSE Data Protection Officer (DPO) can be contacted directly, here:

Data Protection Officer HSE

Joe Ryan

Email: dpo @

Phone: 01 635 2726

Address: Dr Steevens Hospital

Steevens Lane

Dublin 8

Deputy Data Protection Officer West

  • CHO 1 – Cavan, Donegal, Leitrim, Monaghan, Sligo
  • CHO 2 – Galway, Mayo, Roscommon
  • Mid-West Community Healthcare
  • Saolta Hospital Group

Liam Quirke

Email: ddpo.west @

Phone: 091-775819

Deputy Data Protection Officer Dublin North-East (excluding voluntaries)

  • Midlands, Louth, Meath Community Health Organisation
  • Community Health Organisation Dublin North City & County
  • CHO 6 – Dublin South East, Dublin South & Wicklow
  • RCSI Hospital Group
  • National Children’s Hospital

Rosalie Smith-Lynch

Email: ddpo.dne @

Phone: 046-9251265


Deputy Data Protection Officer Dublin mid-Leinster (excluding voluntaries)

  • Dublin Midlands Hospital Group
  • Ireland East Hospital Group
  • Community Healthcare Dublin South, Kildare & West Wicklow

Debbie Keyes

Email: ddpo.dml @

Phone: 057-9357876


Deputy Data Protection Officer South (excluding voluntaries)

  • Cork & Kerry Community Healthcare
  • CHO 5 – Carlow, Kilkenny, South Tipperary, Waterford & Wexford
  • UL Hospital Group
  • South South-West Hospital Group

Liam Quirke

Email: ddpo.south @

Phone: 091-775819