Privacy notice - Emergency Medicines Register

Under Irish law, organisations that want to procure, store, and use emergency medicines must register with the HPRA.

What information do we process?

The HPRA collects and publishes the following information:

  • The name and address of the organisation
  • The business or trading style of the organisation, if different to the organisation name
  • The emergency medicines the organisation intends to procure
  • The address where the medicine will be stored
  • The name of the person who will make sure the emergency medicine is stored and used correctly (known as the accountable person)

The HPRA also collects the following information:

  • The email address of the accountable person in order to set up your account on the emergency medicines portal.
  • The certification expiry date of the training undertaken in relation to how the relevant medicine is used.
  • Any other details you may provide us in relation to your registration e.g. if other email addresses are used to set up an account.

These pieces of information are not published. 

Legal basis for processing

The legal basis for processing personal data for this register is Article 6(1)(c) of the General Data Protection Regulation (GDPR), which states: 'processing is necessary for compliance with a legal obligation to which the controller is subject;'.

The HPRA is required to manage the emergency medicines register and publish details as outlined above under the Medicinal Products (Prescription and Control of Supply) Regulations 2003 (SI 540/2003), as amended.

How is my information processed and shared?

The details outlined above are included in the list of registered organisations.

The HPRA uses third party service providers and suppliers (also known as data processors) to carry out both our regulatory functions and other related matters. These third parties process personal data on behalf of the HPRA and appropriate arrangements are in place with them to protect personal data. The HPRA also uses a third party provider to process payments for the emergency medicines portal. You can find more information about their privacy notice on their website. 

The HPRA does not transfer your personal data to third countries. The name of the most recently nominated accountable person is retained indefinitely unless edited using the online Emergency Medicines Portal.

The HPRA fully respects your right to privacy and treats all personal information with the appropriate standards of security and confidentiality, strictly in accordance with data protection legislation.

What are your rights under data protection law?

Data protection law provides you with the following rights regarding processing of your personal data:

  • The right to request access to your data
  • The right to request your data be rectified or erased
  • The right to request processing of your data be restricted
  • The right to lodge a complaint to the Data Protection Commission

How to contact us

For more information or to make a request your personal data under the GDPR, please submit your request in writing or via email to:

Data Protection Officer
Health Products Regulatory Authority
Kevin O'Malley House,
Earlsfort Centre,
Earlsfort Terrace,
Dublin 2

Tel: +353 (1) 676 4971
Fax: +353 (1) 676 7836
Email: dataprotectionofficer@hpra.ie

Please provide sufficient information in your request to enable us to deal with your query.

Further information regarding data protection at the HPRA can be found in our main privacy notice.