Getting your Garda records

Garda vetting is a check an employer or voluntary body initiates through the National Vetting Bureau when you work with children or vulnerable people. You cannot request your own vetting, and a subject access request is not a way to get one.

A data access request is you asking An Garda Síochána for a copy of the personal data it holds about you — incident records naming you, statements you gave, custody records, correspondence. That is this page.

Data processed for policing purposes — investigating and prosecuting offences — does not run under the GDPR. It runs under Part 5 of the Data Protection Act 2018, which transposes the EU’s separate law-enforcement directive. You still have a right of access, but with wider grounds for restricting what comes back — most obviously where disclosure would prejudice an investigation or prosecution.

Garda data that is not policing data — its dealings with you as an employee or a correspondent, for example — stays under the GDPR, where the standard rules apply: An organisation must respond without undue delay and within one month of receiving your request. It may extend by up to two further months where requests are complex or numerous, but it must tell you within the first month that it is extending, and why.

An Garda Síochána publishes its data protection arrangements on garda.ie — search the site for data protection to find its current request route and forms. Identify yourself fully and expect an identity check; say what records you are after and, crucially, the incidents they relate to: dates, locations, station, incident or PULSE reference numbers if any letter has ever quoted one to you.

The general Irish guide covers wording; cite the Data Protection Act 2018 rather than the GDPR alone, so the request is valid whichever regime each record falls under.

Expect redactions. Other people’s data comes out; so can anything whose disclosure would prejudice an active investigation, reveal intelligence, or endanger someone. A response can lawfully neither confirm nor deny that certain records exist. What you should still get is everything releasable, and where restrictions are applied, a response that says so in general terms.

If the response is silence, or a refusal you doubt, the Data Protection Commission supervises Garda processing under both regimes — complaining is free, and the DPC can check restricted material you are not allowed to see.