Ireland's data protection authority, the Data Protection Commission, published a guidance on vaccine certification checks for data controllers and data subjects. Businesses are identified as data controllers when needing to check the vaccination status of individuals on business premises to follow public health guidelines, which include mass gatherings and indoor events. They cannot retain any personal data after vaccine verification and are subject to the EU General Data Protection Regulation.
Full Story