GDPR & Data Protection

Under GDPR, every person whose personal data is held by an organisation has the right to request a copy of that data. This is known as a Data Subject Access Request (DSAR or SAR). For individuals, it is one of the most powerful tools for understanding how your data is being used. For organisations, receiving […]

What Irish businesses must do about NIS2 cybersecurity rules and the Online Safety Code in 2026 — obligations, deadlines and penalties.

Consent is one of the most misunderstood concepts in GDPR compliance. Many Irish businesses assume they need consent for everything — they don’t. Others collect consent incorrectly and don’t realise it’s invalid. This guide clarifies exactly when consent is needed, what makes it valid, and when other lawful bases may be more appropriate. Consent Is

A personal data breach can happen to any organisation — a misdirected email, a stolen laptop, a cyberattack, or an accidental disclosure. Under GDPR, when a breach occurs, the clock starts immediately. You have just 72 hours to notify the Data Protection Commission (DPC) if the breach is likely to result in a risk to

Ireland is home to the European headquarters of many of the world’s largest technology companies — and the Irish Data Protection Commission (DPC) has become one of the most significant GDPR regulators in the EU. Understanding how GDPR fines work, what triggers DPC investigations, and how to keep your business compliant is essential for any

A practical GDPR checklist for Irish small businesses. What’s required, what the DPC enforces, and how to protect your business.