GDPR & Data Protection

Do you need a DPIA for CCTV in Ireland? What Article 35 GDPR and the DPC CCTV guidance say about large-scale, covert and small systems.

Most Irish websites use cookies but many are not compliant with GDPR and the ePrivacy Regulations. Given the Data Protection Commission’s increasing enforcement activity, compliance is no longer optional for Irish businesses. Which Cookies Require Consent? Consent is required for all cookies except those that are “strictly necessary” for the functioning of the service specifically

Do you need a data processing agreement under GDPR? What Article 28 requires, what to include, and practical steps for Irish businesses.

A DPIA is required before processing likely to be high risk to individuals. See the GDPR cases, the DPC list and what to do if neither applies.

GDPR rules for Irish GP, dental and private clinics: lawful basis for health data, DPO test, records, retention periods, access requests and breaches.

What a ROPA (record of processing activities) is, who needs one under Article 30 GDPR, what to include and how Irish businesses can build one.

What a GDPR audit covers for Irish businesses, how it differs from a gap analysis or DPIA, and how to prepare your records, contracts and policies.

Can a director or IT manager be your DPO? Usually not: Article 38(6) GDPR bars conflicts of interest. See which roles clash and who can act instead.

Can a DPO be outsourced under GDPR? Yes, Article 37(6) allows a service contract. What stays the same, and how to register an outsourced DPO in Ireland.

What does a Data Protection Officer do under GDPR? Plain-English guide to DPO tasks, independence, conflicts of interest and registering a DPO in Ireland.