Pre-Hospital Emergency Care Council

Introduction .................................................................................................................................... 3 2. Legal Framework for the Inquiry and the Decision ......................................................................... 3 Legal Basis for the Inquiry ................................................................................................................... 3 Legal Basis for the Decision................................................................................................................. 4 3. Factual Background ......................................................................................................................... 4 4. Scope of the Inquiry and the Application of the GDPR ................................................................... 7 5. Issues for Determination................................................................................................................. 7 6. Issue 1: The PHECC’s Compliance with Article 37(1) and 37(7) GDPR ............................................ 8 i. Whether the PHECC designated a DPO, published the DPO’s contact details, and communicated the contact details to the DPC ................................................................................... 9 ii. Findings ..................................................................................................................................... 10 7. Issue 2: The PHECC’s Compliance with Article 31 GDPR ............................................................... 10 i. Requests for Cooperation with the DPC ................................................................................... 10 ii. Finding ....................................................................................................................................... 12 8. Corrective Powers ......................................................................................................................... 12 Reprimand ......................................................................................................................................... 13 9. Right of Appeal .............................................................................................................................. 14 Appendix: Schedule of Materials Considered for the Purposes of this Decision ............................... 15 3 1. Introduction 1.1 This document (‘the Decision’) is a decision made by the Data Protection Commission (‘the DPC’) in accordance with section 111 of the Data Protection Act 2018 (‘the 2018 Act’). I make this Decision having considered the information obtained in the own volition inquiry (‘the Inquiry’) pursuant to section 110 of the 2018 Act. The Pre-Hospital Emergency Care Council (‘PHECC’) was provided with an Inquiry Issues Paper in order to make submissions on it. 1.2 The PHECC was provided with the Draft Decision on 30 March 2022 to provide it with a final opportunity to make submissions.