Ireland Guidelines for the Responsible Use of AI in the Public Service (2025)

Chapter 4: the seven principles for responsible AI – Ireland Guidelines for the Responsible Use of AI in the Public Service (2025)

Ireland Guidelines for the Responsible Use of AI in the Public Service (2025) 4.3e: Restrict access to data to those with a legitimate need

What does 4.3e require?

Clear protocols decide who may access the data an AI system uses, and access to user data is limited to people with a legitimate need under the body's policies.

Maintained by Gerard Blokdyk

Other controls in Chapter 4: the seven principles for responsible AI – Ireland Guidelines for the Responsible Use of AI in the Public Service (2025)

4.1a Assess fundamental rights impact before development and let affected people give feedback
4.1b Equip users to understand and contest AI systems, with opt-out from solely automated decisions where warranted
4.1c Build human oversight into every AI process and keep final decisions and reviews with people
4.2a Hold internally built and third-party AI systems to the body's IT security policies and national guidance
4.2b Prepare and prove a fallback plan, and complete a full risk assessment, before deployment
4.2c Test and monitor across the lifecycle for accuracy, reliability and reproducibility, and escalate shortfalls
4.3a Classify the dataset first: personal data brings the GDPR into play, anonymised or synthetic data may not
4.3b Settle the legal basis for personal data processing, consulting the Data Protection Commission where required

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Ireland Guidelines for the Responsible Use of AI in the Public Service (2025) controls