Data Breach Response Pack

A data breach response pack in Ireland gives organisations professional guidance when a personal data breach occurs.The pack covers whether the breach is notifiable, the DPC notification, whether individuals must be told, breach documentation and containment steps, with initial advice during business hours by phone and email.

The price shown is the full professional fee for the service as described, and any third-party or State fees are listed separately where they apply. If your matter needs more than this service covers, a solicitor would explain the options before any further work is done.

What’s included

• Prompt advice on whether the breach is notifiable to the DPC
• Guidance on the 72-hour notification deadline
• Preparation of the DPC notification if required
• Advice on notifying affected individuals
• Guidance on breach documentation and containment
• Template notification letters for individuals if required
• Self-complete template with guidance notes — you fill it in yourself
• Documents tailored to Irish law and your circumstances, delivered by email
• A written summary of the key points and anything you need to do afterwards

Who this is for

• Businesses that have lost or exposed personal data
• Organisations hit by a cyber incident
• Employers after an accidental email disclosure
• Businesses unsure whether to notify the DPC

How it works

1. Find a solicitor through the Law Society of Ireland’s Find a Solicitor directory and send them the basic details and any existing documents or correspondence.
2. Complete a short questionnaire about your circumstances.
3. A solicitor would then advise on notification and prepares the necessary documents.
4. The completed work is delivered to you by email, with plain-English notes on what to do next.

Frequently asked questions

How much does a data breach response pack cost?

This page is a free guide — nothing on it is for sale. Solicitors set their own fees for this work and must give you a written costs estimate (a section 150 letter) before starting. Get quotes through the Law Society of Ireland’s Find a Solicitor directory.

Do all data breaches have to be reported?

Only breaches likely to result in a risk to individuals must be notified to the DPC, but all breaches should be documented.

When must individuals be told?

Where a breach is likely to result in a high risk to them.

For more on GDPR and data protection, see our GDPR & Data Protection in Ireland guides and services.

If you would like to be told when solicitor services are available again on this site, you can join our no-fee waiting list. To instruct a solicitor now, use the Law Society of Ireland’s Find a Solicitor directory.