{"id":826,"date":"2021-10-01T19:33:36","date_gmt":"2021-10-01T19:33:36","guid":{"rendered":"https:\/\/ichr.ie\/?p=826"},"modified":"2021-10-03T11:22:10","modified_gmt":"2021-10-03T11:22:10","slug":"domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws","status":"publish","type":"post","link":"https:\/\/ichr.ie\/domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws\/","title":{"rendered":"Domestic Vaccine Passports in Venues Other Than Indoor Dining and Data Protection Laws"},"content":{"rendered":"<div id='av-layout-grid-1'  class='av-layout-grid-container av-jpewe-04e19ddb9c13a829e15ba67e3b938150 entry-content-wrapper main_color av-flex-cells  avia-builder-el-0  avia-builder-el-no-sibling   container_wrap fullsize'  >\n<div class='flex_cell av-dn43q-ec55631260665078b46dd50e2e1380af av-gridrow-cell av_one_fifth no_margin  avia-builder-el-1  el_before_av_cell_three_fifth  avia-builder-el-first '  ><div class='flex_cell_inner'><\/div><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kiaebrcb-84b020b35174f19a7a794986cfaa1960\">\n.flex_cell.av-kiaebrcb-84b020b35174f19a7a794986cfaa1960{\nvertical-align:top;\n}\n.responsive #top #wrap_all .flex_cell.av-kiaebrcb-84b020b35174f19a7a794986cfaa1960{\npadding:0px 0px 30px 0px !important;\n}\n<\/style>\n<div class='flex_cell av-kiaebrcb-84b020b35174f19a7a794986cfaa1960 av-gridrow-cell av_three_fifth no_margin  avia-builder-el-2  el_after_av_cell_one_fifth  el_before_av_cell_one_fifth '  ><div class='flex_cell_inner'><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kj2z71cz-d89f67bb506d4015baf4624ed7380d70\">\n#top .hr.hr-invisible.av-kj2z71cz-d89f67bb506d4015baf4624ed7380d70{\nheight:10px;\n}\n<\/style>\n<div  class='hr av-kj2z71cz-d89f67bb506d4015baf4624ed7380d70 hr-invisible  avia-builder-el-3  el_before_av_heading  avia-builder-el-first  av-small-hide av-mini-hide'><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-av_heading-5dc7eb921d02a6eb8b0aae6cf41daf5f\">\n#top .av-special-heading.av-av_heading-5dc7eb921d02a6eb8b0aae6cf41daf5f{\npadding-bottom:20px;\n}\nbody .av-special-heading.av-av_heading-5dc7eb921d02a6eb8b0aae6cf41daf5f .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-av_heading-5dc7eb921d02a6eb8b0aae6cf41daf5f .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-av_heading-5dc7eb921d02a6eb8b0aae6cf41daf5f av-special-heading-h3 blockquote modern-quote modern-centered  avia-builder-el-4  el_after_av_hr  el_before_av_hr '><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >Domestic Vaccine Passports in Venues Other Than Indoor Dining and Data Protection Laws<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kj2z71cz-645b771fc4e6374c1957209d4d65b5a1\">\n#top .hr.hr-invisible.av-kj2z71cz-645b771fc4e6374c1957209d4d65b5a1{\nheight:20px;\n}\n<\/style>\n<div  class='hr av-kj2z71cz-645b771fc4e6374c1957209d4d65b5a1 hr-invisible  avia-builder-el-5  el_after_av_heading  el_before_av_image  av-desktop-hide av-medium-hide'><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kiaea5zn-23b1550ad66b6c3c47e6359e3fa54e45\">\n.avia-image-container.av-kiaea5zn-23b1550ad66b6c3c47e6359e3fa54e45 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-kiaea5zn-23b1550ad66b6c3c47e6359e3fa54e45 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-kiaea5zn-23b1550ad66b6c3c47e6359e3fa54e45 av-styling- avia-align-center  avia-builder-el-6  el_after_av_hr  el_before_av_hr '   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><img decoding=\"async\" fetchpriority=\"high\" class='wp-image-827 avia-img-lazy-loading-not-827 avia_image ' src=\"https:\/\/ichr.ie\/wp-content\/uploads\/2021\/10\/luca-bravo-8x_fFNrmeDk-unsplash.jpg\" alt='' title='luca-bravo-8x_fFNrmeDk-unsplash'  height=\"427\" width=\"640\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/ichr.ie\/wp-content\/uploads\/2021\/10\/luca-bravo-8x_fFNrmeDk-unsplash.jpg 640w, https:\/\/ichr.ie\/wp-content\/uploads\/2021\/10\/luca-bravo-8x_fFNrmeDk-unsplash-300x200.jpg 300w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kiaebndu-f1087c94582ea4d8bfd418e5b24bf9d7\">\n#top .hr.hr-invisible.av-kiaebndu-f1087c94582ea4d8bfd418e5b24bf9d7{\nheight:20px;\n}\n<\/style>\n<div  class='hr av-kiaebndu-f1087c94582ea4d8bfd418e5b24bf9d7 hr-invisible  avia-builder-el-7  el_after_av_image  el_before_av_textblock '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  class='av_textblock_section av-kiae35dz-722c528016c51254f3186fc23fe2049c '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>As you will know the introduction of domestic vaccine passports for indoor dining was made possible by the enactment of the Health (Amendment) (No.2) Act 2021 (hereinafter referred to as the \u201c<strong>Act<\/strong>\u201d), which was passed by Dail Eireann, on the 14<sup>th<\/sup> of July 2021, by 72 votes in favour and 66 votes against. Part 2 of the Act will expire on the 9<sup>th<\/sup> of October 2021, unless extended by both House of the Oireachtas prior to this date.<\/p>\n<p>As matters stand, the only businesses legally mandated to implement vaccine passports are indoor dining facilities, however, the ICHR have been made aware that an increasing number of businesses without legal mandate, are electing to implement vaccine passports as a requirement of admission into their premises \/ as a requirement for access to goods and\/or services.<\/p>\n<p>To date we have been advised of the following businesses and venues who have required or who are requiring production of vaccine passport for admission purposes or as a condition of service:<\/p>\n<ul>\n<li>Access to organ transplant by Beaumont Hospital;<\/li>\n<li>Access to indoor canteens by students, on college premises;<\/li>\n<li>Access to hospitals in the capacity of a visitor;<\/li>\n<li>Access to in-person hospital appointments for children, where the parents are unvaccinated;<\/li>\n<li>Access to indoor child soft play areas, unless the parents are vaccinated;<\/li>\n<li>Access by players to competitions such as snooker;<\/li>\n<li>Access to school information evenings unless parents are fully vaccinated;<\/li>\n<li>Access by children to foreign school trips, unless accompanied by an adult;<\/li>\n<li>Access to training courses;<\/li>\n<li>Access to cinemas; and<\/li>\n<li>Access to concerts;<\/li>\n<\/ul>\n<p>Therefore, should a situation arise whereby the Irish Government withdraw the mandate for vaccine passports in indoor dining facilities, it is quite likely that private businesses will continue to elect to implement such passports without being legally required to do so. We believe that any such processing of health data represents unnecessary and excessive data collection for which no clear legal basis exists and therefore any such processing is illegal.<\/p>\n<p>See below explanation of the law in this area for further guidance.<\/p>\n<p><strong><u>1) General Data Protection Regulations<\/u><\/strong><\/p>\n<p>The General Data Protection Regulations (the \u201c<strong>Regulations<\/strong>\u201d) which came into force on the 25th of May 2018 lay down rules relating to the protection of persons with regard to the processing of their personal data.<\/p>\n<p>The recitals to the Regulations state that: &#8211;<\/p>\n<p>\u201c<em>The protection of natural persons in relation to the processing of personal data is a \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 fundamental right<\/em>\u201d.<\/p>\n<p>Article 8 of the EU Charter of Fundamental Rights states that everyone has the right to the protection of their personal data and such data must be processed fairly for specified purposes <u>and on the basis of the consent of the person concerned, or some other legitimate basis laid down by law<\/u>.<\/p>\n<p>Information regarding whether or not a person has been vaccinated against SAR-CoV-2 constitutes health data, which is a type of special category data under the Regulations.<\/p>\n<p><strong><u>2) Article 6 (Lawfulness of Processing) of the General Data Protection Regulations<\/u><\/strong><\/p>\n<p>In order to lawfully process health data, the data controller must first determine a legal basis for the processing of such data under Article 6 of the Regulations, which is limited to the following:<\/p>\n<p><strong><u>2.1 The Data Subject has given Consent to the Processing of his or her Personal Data for One or More Specific Purposes;<\/u><\/strong><\/p>\n<p>Please find below the basic requirements for effective valid consent under the Regulations<\/p>\n<p><strong><u>Article 7 (Conditions for Consent) of the Regulations provides: &#8211;<\/u><\/strong><\/p>\n<p><em>\u201c1. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.<\/em><\/p>\n<ol start=\"4\">\n<li><em><u> When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract.\u201d<\/u><\/em><\/li>\n<\/ol>\n<p><strong><u>Recital 32 (Conditions for Consent) provides: &#8211;<\/u><\/strong><\/p>\n<p><em>\u201cConsent should be given by a clear affirmative act establishing a <u>freely given<\/u>, specific, informed and unambiguous indication of the data subject\u2019s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.\u00a0<\/em><\/p>\n<p><strong><u>Recital 42 (Burden of Proof and Requirements for Consent) provides: &#8211;<\/u><\/strong><\/p>\n<p><em>\u201cWhere processing is based on the data subject\u2019s consent, the controller should be able to demonstrate that the data subject has given consent to the processing operation\u2026..\u00a0<u>Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.\u201d<\/u><\/em><\/p>\n<p><strong><u>Recital 43 (Freely Given Consent) provides: &#8211;<\/u><\/strong><\/p>\n<p><em><u>\u201cIn order to ensure that consent is freely given, consent should not provide a valid legal ground for the processing of personal data in a specific case where there is a clear imbalance between the data subject and the controller, in particular where the controller is a public authority and it is therefore unlikely that consent was freely given in all the circumstances of that specific situation.\u00a0Consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case, or if the performance of a contract, including the provision of a service, is dependent on the consent despite such consent not being necessary for such performance.\u201d<\/u><\/em><\/p>\n<p><strong><u>Article 29 Data Protection Working Party: Guidelines on Consent under Regulation 2016\/670 Adopted on 28 November 2017 <\/u><\/strong><strong><u>(\u201cWP29\u201d) provides: &#8211;<\/u><\/strong><\/p>\n<p><em>\u201cGenerally, consent can only be an appropriate lawful basis if a data subject is offered control <u>and is<br \/>\noffered a genuine choice with regard to accepting or declining the terms offered or declining them<br \/>\nwithout detriment<\/u><\/em><\/p>\n<p><strong><em>\u201c3.1. Free \/ freely given<\/em><\/strong><\/p>\n<p><strong><em><br \/>\n<\/em><\/strong><em><u>The element \u201cfree\u201d implies real choice and control for data subjects. As a general rule, the GDPR<br \/>\nprescribes that if the data subject has no real choice, feels compelled to consent or will endure<br \/>\nnegative consequences if they do not consent, then consent will not be valid. If consent is bundled<br \/>\nup as a non-negotiable part of terms and conditions it is presumed not to have been freely given.<\/u><\/em><em><br \/>\nAccordingly, consent will not be considered to be free if the data subject is unable to refuse or<br \/>\nwithdraw his or her consent without detriment. The notion of imbalance between the controller<br \/>\nand the data subject is also taken into consideration by the GDPR.\u201d<\/em><\/p>\n<p><strong><u>2.2 Processing is Necessary for the Performance of a Contract <\/u><\/strong><strong><u>to which the Data Subject is Party or in Order to Take Steps at the Request of the Data Subject Prior to Entering into a Contract;<\/u><\/strong><\/p>\n<p>Article 29 Data Protection Working Party: Guidelines on Consent under Regulation 2016\/670 Adopted on 28 November 2017 (\u201c<strong>WP29<\/strong>\u201d) provides: &#8211;<\/p>\n<p><strong><em>\u201c3.1.2. Conditionality<\/em><\/strong><\/p>\n<p><em><u>To assess whether such a situation of bundling or tying occurs, it is important to determine what the<br \/>\nscope of the contract or service is. According to Opinion 06\/2014 of WP29, the term \u201cnecessary for<br \/>\nthe performance of a contract\u201d needs to be interpreted strictly. The processing must be necessary to<br \/>\nfulfil the contract with each individual data subject. This may include, for example, processing the<br \/>\naddress of the data subject so that goods purchased online can be delivered, or processing credit<br \/>\ncard details in order to facilitate payment. <\/u><\/em><\/p>\n<p><strong><u>2.3 Processing is Necessary for Compliance with a Legal Obligation to which the Controller is Subject;<\/u><\/strong><\/p>\n<p>Please be advised that the only premises entitled, at law, to impose restrictions upon entry to an indoor premises (on the basis of a person\u2019s vaccination status) are those set out under:<\/p>\n<ol>\n<li>the Health (Amendment) (No. 2) Act 2021; or<\/li>\n<li>Statutory Instrument 385 of 2021.<\/li>\n<\/ol>\n<p>For the avoidance of doubt, a \u201c<em>relevant indoor premises<\/em>\u201d means an indoor premises:<\/p>\n<ul>\n<li>on or at which food or non-alcoholic beverages may be lawfully sold or supplied for consumption on such premises;<\/li>\n<li>any business or service that would otherwise be lawfully permitted to sell alcohol for consumption on the premises; and<\/li>\n<li>such other indoor premises, or class of indoor premises, that the Minister for Health may prescribe through regulations.<\/li>\n<\/ul>\n<p><strong><u>2.4 Processing is Necessary in Order to Protect the Vital Interests of the Data Subject or of Another Natural Person;<\/u><\/strong><\/p>\n<p>The Data Protection Commission Guidance Note: Legal Bases for Processing Personal Data dated December 2019 (the \u201c<strong>2019 Guidance<\/strong>\u201d) provides the following: &#8211;<\/p>\n<p><em>\u201cControllers are most likely to rely on this legal basis where the processing of personal data is needed in order <u>to protect someone\u2019s life<\/u>, or mitigate against a <u>serious threat to a person, for example a child or a missing person.<\/u><\/em><\/p>\n<p><em>\u00a0<\/em><\/p>\n<p><em>Vital interests may be an appropriate legal basis in atypical circumstances, where none of the other legal bases clearly apply. For example, where sensitive special category personal data is concerned, such as health data \u2013 <u>potentially in an emergency situation<\/u> \u2013 vital interests may provide both a legal basis under Article 6, but also an exception from the prohibition of processing such data under Article 9 GDPR. Many cases in which the protection of vital interests is relied upon as a legal basis for<br \/>\nprocessing are likely to involve special category health data, <u>and Article 9(2)(c) GDPR allows for processing such data where necessary to protect someone\u2019s vital interests; but, this only applies if the data subject is physically or legally incapable of giving consent.<\/u><\/em><\/p>\n<p><em><u>\u00a0<\/u><\/em><\/p>\n<p><strong><u>2.5 Processing is Necessary for the Performance of a Task Carried Out in the Public Interest or in the Exercise of Official Authority Vested in the Controller;<\/u><\/strong><\/p>\n<p>The Data Protection Commission Guidance Note: Legal Bases for Processing Personal Data dated December 2019 (the \u201c<strong>2019 Guidance<\/strong>\u201d) provides the following: &#8211;<\/p>\n<p><em>\u00a0<\/em><\/p>\n<p><em><u>\u201cThis legal basis is likely to apply to a more limited sub-set of controllers, where it is necessary for them to process personal data to carry out a task in the public interest, or exercise their official authority.<\/u><\/em><\/p>\n<p><em>\u00a0<\/em><\/p>\n<p><em><u>Article 6(3) GDPR also sets out that where processing is based on this legal basis, it should be grounded on EU or national law<\/u><\/em><em>, which meets an objective or public interest and is proportionate and legitimate to the aim pursued. <u>Thus, a controller may rely on this legal basis if it is necessary for them to process personal data either in the exercise of official authority (covering public functions and powers as set out in law) or to perform a specific task in the public interest (as set out in law).<\/u><\/em><\/p>\n<p><em><u>\u00a0<\/u><\/em><\/p>\n<p><strong><u>2.6 Processing is Necessary for the Purposes of the Legitimate Interests Pursued by the Controller or by a Third Party, except where such Interests are Overridden by the Interests or Fundamental Rights and Freedoms of the Data Subject which require Protection of Personal Data, in particular where the Data Subject is a Child.<\/u><\/strong><\/p>\n<p><em><u>\u00a0<\/u><\/em><\/p>\n<p>Where a data controller seeks to rely on the Legitimate Interests basis, they should be aware that such utilisation brings with it heightened obligations to balance the legitimate interests they are seeking to pursue with the rights and interests of the data subject.<\/p>\n<p>The Data Protection Commission Guidance Note: Legal Bases for Processing Personal Data dated December 2019 (the \u201c<strong>2019 Guidance<\/strong>\u201d) provides the following: &#8211;<\/p>\n<p><em>As such, legitimate interests is likely to be an appropriate legal basis in cases where controllers process data subjects\u2019 personal data in a way which they would reasonably expect and which would have a <u>minimal impact on their privacy<\/u>, by virtue of the nature of the processing or safeguards introduced. <\/em><\/p>\n<p><em><u>Where there would be a more than minimal impact on the data subject\u2019s privacy rights, or other rights, freedoms, or interests, it may still be possible to rely on this legal basis, but the legitimate interest being pursued by the controller would need to be a particularly compelling justification for processing.<\/u><\/em><\/p>\n<p><strong><u>3) Article 9 (Processing of Special Categories of Personal Data) of the General Data Protection Regulations<\/u><\/strong><\/p>\n<p>In circumstances where the premises can determine a legal basis for the processing of health data under Article 6 (which appears unlikely), then the premises should be aware that the processing of special categories of personal data (which includes health data) is generally prohibited unless the Premises can avail itself of one of the exemptions under Article 9, which is limited to the following:<\/p>\n<ul>\n<li>the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject;<\/li>\n<li>processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject;<\/li>\n<li>processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent;<\/li>\n<li>processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects;<\/li>\n<li>processing relates to personal data which are manifestly made public by the data subject;<\/li>\n<li>processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity;<\/li>\n<li>processing is necessary for reasons of substantial public interest, <u>on the basis of Union or Member State law<\/u> which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;<\/li>\n<li>processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services <u>on the basis of Union or Member State law <\/u>or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3;<\/li>\n<li>processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices<u>, on the basis of Union or Member State law <\/u>which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy;<\/li>\n<li>processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with\u00a0<a href=\"https:\/\/gdpr-info.eu\/art-89-gdpr\/\">Article 89<\/a>(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.<\/li>\n<\/ul>\n<p><strong><u>TAKE ACTION<\/u><\/strong><\/p>\n<p><strong><u>\u00a0<\/u><\/strong><\/p>\n<p>If you have been requested to produce evidence of your vaccination status against SARS-CoV-2 in order to access a premises \/ goods and\/or services (excluding indoor dining facilities), please find the following letters:<\/p>\n<p><strong>Letter 1:<\/strong> Letter to business\/venue asking them to confirm the lawful basis for the processing of your special category data. Note that this letter contains a detailed examination of the law in this area, such that any queries around the lawful processing of your special category data should be addressed in this letter. Please note the sections in yellow that require completion.<\/p>\n<p><strong>Letter 2<\/strong>: Failing a response from the business within 7 days (or in circumstances where you receive an unsatisfactory response), you may send this letter to the Data Commissioner asking them to commence an investigation into the unlawful processing of your special category data. Please note that you should send the Data Commissioner a copy of any correspondence you have sent to the business\/venue in question and any response received.<\/p>\n<p><strong><u>It is worth noting that the Data Commissioner has issued two guidance papers regarding Covid-19 which have provided i) there is no lawful basis to undertake temperature checking in the workplace; and ii) there is no lawful basis (with the exception of frontline health care workers) to request the vaccination status of employees in the workplace. Given the Data Commissioners willingness to address illegalities around the implementation of Covid-19 policies, it is fair to assume that should the Data Commissioner receive a substantial number of complaints regarding domestic vaccine passports, that she <em>may<\/em> see fit to issue a guidance note on same. <\/u><\/strong><\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kiah8p1j-00f87aa2439adc3a2530a9d5939bf4bf\">\n#top .hr.hr-invisible.av-kiah8p1j-00f87aa2439adc3a2530a9d5939bf4bf{\nheight:20px;\n}\n<\/style>\n<div  class='hr av-kiah8p1j-00f87aa2439adc3a2530a9d5939bf4bf hr-invisible  avia-builder-el-9  el_after_av_textblock  el_before_av_buttonrow '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<div  class='avia-buttonrow-wrap av-ku8rk4bf-85965bb8075d2fbae42674c6275482c0 avia-buttonrow-center  avia-builder-el-10  el_after_av_hr  el_before_av_hr '>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-av_buttonrow_item-6b5ed2a9879480cb7b68978caf1ba4ce\">\n#top #wrap_all .avia-button.av-av_buttonrow_item-6b5ed2a9879480cb7b68978caf1ba4ce{\nmargin-bottom:5px;\nmargin-right:3px;\nmargin-left:3px;\n}\n<\/style>\n<a href='https:\/\/ichr.ie\/wp-content\/uploads\/2021\/10\/Data-Protection-Letter-Vaccine-Passport-Non-Indoor-Dining-Setting-FINAL-1.docx'  class='avia-button av-av_buttonrow_item-6b5ed2a9879480cb7b68978caf1ba4ce avia-icon_select-yes-left-icon avia-size-small avia-color-theme-color'  ><span class='avia_button_icon avia_button_icon_left ' aria-hidden='true' data-av_icon='\ue87f' data-av_iconfont='entypo-fontello'><\/span><span class='avia_iconbox_title' >Letter 1<\/span><\/a>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-8586y-33bea41f604db6e65fd06ea8e325578c\">\n#top #wrap_all .avia-button.av-8586y-33bea41f604db6e65fd06ea8e325578c{\nmargin-bottom:5px;\nmargin-right:3px;\nmargin-left:3px;\n}\n<\/style>\n<a href='https:\/\/ichr.ie\/wp-content\/uploads\/2021\/10\/Letter-to-Helen-Dixon-Data-Commissioner.docx'  class='avia-button av-8586y-33bea41f604db6e65fd06ea8e325578c avia-icon_select-yes-left-icon avia-size-small avia-color-theme-color'  ><span class='avia_button_icon avia_button_icon_left ' aria-hidden='true' data-av_icon='\ue87f' data-av_iconfont='entypo-fontello'><\/span><span class='avia_iconbox_title' >Letter 2<\/span><\/a>\n<\/div><br \/>\n<div  class='hr av-f0qda-2d8f3712b89d3a7b8fc8b7baa82b1205 hr-default  avia-builder-el-11  el_after_av_buttonrow  el_before_av_social_share '><span class='hr-inner '><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<div  class='av-social-sharing-box av-9bvda-cae499ddf2aa782a0cde3ba47cd56910 av-social-sharing-box-default  avia-builder-el-12  el_after_av_hr  avia-builder-el-last  av-social-sharing-box-fullwidth'><div class=\"av-share-box\"><h5 class='av-share-link-description av-no-toc '>Share this entry<\/h5><ul class=\"av-share-box-list noLightbox\"><li class='av-share-link av-social-link-facebook' ><a target=\"_blank\" aria-label=\"Share on Facebook\" href='https:\/\/www.facebook.com\/sharer.php?u=https:\/\/ichr.ie\/domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws\/&#038;t=Domestic%20Vaccine%20Passports%20in%20Venues%20Other%20Than%20Indoor%20Dining%20and%20Data%20Protection%20Laws' aria-hidden='false' data-av_icon='\ue8f3' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share on Facebook' rel=\"noopener\"><span class='avia_hidden_link_text'>Share on Facebook<\/span><\/a><\/li><li class='av-share-link av-social-link-twitter' ><a target=\"_blank\" aria-label=\"Share on X\" href='https:\/\/twitter.com\/share?text=Domestic%20Vaccine%20Passports%20in%20Venues%20Other%20Than%20Indoor%20Dining%20and%20Data%20Protection%20Laws&#038;url=https:\/\/ichr.ie\/?p=826' aria-hidden='false' data-av_icon='\ue932' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share on X' rel=\"noopener\"><span class='avia_hidden_link_text'>Share on X<\/span><\/a><\/li><li class='av-share-link av-social-link-square-x-twitter' ><a target=\"_blank\" aria-label=\"Share on X\" href='https:\/\/twitter.com\/share?text=Domestic%20Vaccine%20Passports%20in%20Venues%20Other%20Than%20Indoor%20Dining%20and%20Data%20Protection%20Laws&#038;url=https:\/\/ichr.ie\/?p=826' aria-hidden='false' data-av_icon='\ue933' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share on X' rel=\"noopener\"><span class='avia_hidden_link_text'>Share on X<\/span><\/a><\/li><li class='av-share-link av-social-link-whatsapp' ><a target=\"_blank\" aria-label=\"Share on WhatsApp\" href='https:\/\/api.whatsapp.com\/send?text=https:\/\/ichr.ie\/domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws\/' aria-hidden='false' data-av_icon='\uf232' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share on WhatsApp' rel=\"noopener\"><span class='avia_hidden_link_text'>Share on WhatsApp<\/span><\/a><\/li><li class='av-share-link av-social-link-linkedin' ><a target=\"_blank\" aria-label=\"Share on LinkedIn\" href='https:\/\/linkedin.com\/shareArticle?mini=true&#038;title=Domestic%20Vaccine%20Passports%20in%20Venues%20Other%20Than%20Indoor%20Dining%20and%20Data%20Protection%20Laws&#038;url=https:\/\/ichr.ie\/domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws\/' aria-hidden='false' data-av_icon='\ue8fc' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share on LinkedIn' rel=\"noopener\"><span class='avia_hidden_link_text'>Share on LinkedIn<\/span><\/a><\/li><li class='av-share-link av-social-link-mail' ><a  aria-label=\"Share by Mail\" href='mailto:?subject=Domestic%20Vaccine%20Passports%20in%20Venues%20Other%20Than%20Indoor%20Dining%20and%20Data%20Protection%20Laws&#038;body=https:\/\/ichr.ie\/domestic-vaccine-passports-in-venues-other-than-indoor-dining-and-data-protection-laws\/' aria-hidden='false' data-av_icon='\ue805' data-av_iconfont='entypo-fontello' title='' data-avia-related-tooltip='Share by Mail'><span class='avia_hidden_link_text'>Share by Mail<\/span><\/a><\/li><\/ul><\/div><\/div><\/p>\n<\/div><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-6v0am-edd4284606f8ba11bc238be475ab615a\">\n.flex_cell.av-6v0am-edd4284606f8ba11bc238be475ab615a{\nvertical-align:top;\n}\n.responsive #top #wrap_all .flex_cell.av-6v0am-edd4284606f8ba11bc238be475ab615a{\npadding:30px 30px 30px 30px !important;\n}\n<\/style>\n<div class='flex_cell av-6v0am-edd4284606f8ba11bc238be475ab615a av-gridrow-cell av_one_fifth no_margin  avia-builder-el-13  el_after_av_cell_three_fifth  avia-builder-el-last '  ><div class='flex_cell_inner'><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":827,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"_links":{"self":[{"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/posts\/826"}],"collection":[{"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/comments?post=826"}],"version-history":[{"count":0,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/posts\/826\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/media\/827"}],"wp:attachment":[{"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/media?parent=826"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/categories?post=826"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ichr.ie\/wp-json\/wp\/v2\/tags?post=826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}