66. (1) A person to whom this section applies may, where necessary and proportionate for the performance of his, her or its functions under this Act, process personal data, including special categories of personal data, in accordance with the General Data Protection Regulation and the Data Protection Act 2018 and any regulations under section 67.

(2) This section applies to the following persons:

(a) the Authority;

(b) the Agency;

(c) an tArd-Chláraitheoir;

(d) a relevant body;

(e) a secondary information source.

(3) For the purposes of this Act—

(a) the Authority is designated as data controller in relation to personal data processed by it for the purposes of the performance of its functions under this Act, and

(b) the Agency is designated as data controller in relation to personal data processed by it for the purposes of the performance of its functions under this Act.