Thread: A query regarding Data Privacy & Legal Obligations

Hi, I am working on a project using a shared hosting provider. The project involves the storing of and "secured" access to customer information such as

• Contact information
• Private messages
• Billing history (not credit card information, etc, just payments due, payment history)

Legally what do I have to do, in order to comply with Irish legislation on this matter. What do I have to show on the website in order to conform.

Many thanks

Not sure you have to display anything on the site itself. It would be good practice to show how you deal with private data and PII.

In terms of what your obligations are - you are obliged to securely maintain personal data - i.e. not to share or use that data outside the terms under which people have given you that data. You may also be obliged to grant access to any data you store in electronic format to the 'owner' of that data - i.e. if you have a record on me I believe I have a right to see what that record holds.

You're best bet here though is to visit the website of the Data Commish - lots of guides over there:

Home - Data Protection Commissioner - Ireland

If you ring the Data Privacy lot and explain what you / your client is doing then they can probably point you in the right direction.