65A. (1) In this Part—

F5[…]

F6[‘Data Protection Regulation’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016⁴² on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);]

‘end user’ means a person who has entered into an end user contract with a postcode contractor or a value added reseller;

‘end user contract’ means a contract entered into between the postcode contractor or a value added reseller and an end user pursuant to which the postcode contractor or the value added reseller supplies a value added service to the end user;

‘legitimate postcode activity’ shall be construed in accordance with subsection (2);

‘national postcode system’ has the meaning assigned to it by section 66(1);

F7[‘personal data’ means personal data within the meaning of the Data Protection Regulation;]

‘personalised data’ is information (other than a postcode, a geo-coordinate, an address or a variation of an address) associated to a postcode in a postcode database that:

(a) is unique to a property and is associated in the postcode database concerned to the postcode corresponding to the address of that property, unless such information is lawfully and publicly available or accessible;

(b) is associated directly or indirectly in the postcode database concerned to the name of a person;

(c) is unique to an owner or occupier of property and is directly or indirectly associated in the postcode database concerned to the postcode corresponding to the address of that property;

‘postcode’ has the meaning assigned to it by section 66(1);

‘postcode contractor’ means the person with whom the Minister has entered into a contract under section 66(2);

‘postcode database’ means any database established and maintained by the postcode contractor or a value added reseller that contains or includes postcodes;

‘privacy notice’ shall be construed in accordance with section 66B;

F7[‘processing’ means processing within the meaning of the Data Protection Regulation;]

‘universal postal service provider’ has the meaning assigned to it by section 6(1);

‘value added reseller’ means the holder of a value added reseller licence;

‘value added reseller licence’ means a licence between the postcode contractor and a value added reseller, that authorises the value added reseller to supply a value added service in respect of a postcode database;

‘value added service’ means the supply by a value added reseller to an end user of a postcode database or a product or service that uses or is derived from a postcode database.

(2) For the purposes of this Part, each of the following is a legitimate postcode activity:

(a) the development, implementation or maintenance by the Minister or the postcode contractor of the national postcode system;

(b) the association of a geo-coordinate or address (including any variation of an address) to a postcode by the Minister or the postcode contractor for the purposes of the development, implementation or maintenance of the national postcode system;

(c) the dissemination (including through the processing of personal data controlled by An Post, a universal postal service provider or such other person as the Minister considers appropriate), on behalf of either the postcode contractor or the Minister, of a postcode to its corresponding address by An Post, a universal postal service provider or such other person as the Minister considers appropriate;

(d) the matching (in this paragraph referred to as a ‘matching service’) for a person (in this paragraph referred to as a ‘matching service end user’) by the Minister, the postcode contractor or a value added reseller of an address (including variation of an address) to a postcode, or to a geo-coordinate associated to a postcode provided that—

(i) the information provided by the matching service end user to the Minister, postcode contractor or value added reseller for the purposes of obtaining the matching service is limited to one or more of the following:

(I) the address (including a variation of the address);

(II) an identifier of the property, other than the name of a person;

(III) such other information (other than the name of a person) specified by the Minister as appropriate to be provided,

and

(ii) the Minister, contractor or value added reseller does not provide to the matching service end user the name of any person owning or occupying the property in question;

(e) the inclusion within a postcode database by the Minister, postcode contractor or a value added reseller of a variation of an address obtained from a person who owns or occupies the property to which the address relates, or from an end user;

(f) the creation or management by the Minister, postcode contractor or a value added reseller of a postcode database that—

(i) does not include personalised data, or

(ii) includes personalised data with the consent of the person concerned;

(g) the licensing to a value added reseller by the Minister or postcode contractor, or the licensing to an end user by a postcode contractor or a value added reseller, of a postcode database that—

(i) does not include personalised data, or

(ii) includes personalised data with the consent of the person concerned;

(h) the supply by a value added reseller to an end user of a value added service to the extent that the value added service uses or is derived from a postcode database where such database—

(i) does not include personalised data, or

(ii) includes personalised data with the consent of the person concerned;

(i) such other activities as the Minister may, after consultation with the Minister for Justice and Equality and the Data Protection Commissioner, prescribe by regulations, having regard to the development, implementation and maintenance of the national postcode database and the rights of owners and occupiers of property.]