S.L. 528.11 Art. 5Personal data processed by other entities.

(1) In the performance of its functions, the

Directorate shall be entitled to request and, or receive from the entities listed in the Schedule, personal data pertaining to the applicant, which is limited to the extent needed for the purposes of these regulations, and to what is necessary and proportionate to the objectives pursued by the Directorate:

Provided that the Minister may by regulations, after consultation with the Information and Data Protection Commissioner, amend the Schedule.

(2) When the personal data transferred by the entities listed in the Schedule, includes data other than that required for the purposes of these regulations, the Directorate shall delete this data immediately and permanently upon receipt of said data.

(3) The personal data processed by the Directorate, including the results obtained from the other entities, shall not be further processed in a manner that is incompatible with the purposes of these regulations.