Self-complete template. You get an editable Word template, plain-English guidance notes and a completion checklist, emailed to you after payment is confirmed. Written for use in Ireland.
Not included: legal advice, tailoring, review, witnessing or filing. OnlineLegalServices.ie is operated by Plus Promotions Limited, which is not a solicitor’s practice. If you want a solicitor to review your completed document, find one through the Law Society of Ireland’s directory.
Five self-complete templates to help a small Irish business get GDPR-ready
Built for Irish SMEs after the Data Protection Commission shifted enforcement focus to small and medium businesses in 2025. provided as a self-complete template. Maps to the Irish Data Protection Act 2018 + EU GDPR.
What’s included
- Editable Word template written for use in Ireland
- Plain-English guidance notes explaining each section
- Completion checklist
- Delivered by email after payment — you fill it in yourself
Not included: legal advice, tailoring, review, witnessing or filing.
What’s not included
- Acting as your appointed Data Protection Officer
- Defending an active DPC investigation
- Custom Data Processing Agreements with specific third parties
Why this matters in 2026
The Data Protection Commission has been clear in its 2025–26 strategy that small and medium enterprises, healthcare providers, and local-service businesses are now in scope for active enforcement. The penalty range under the GDPR remains up to €20 million or 4% of annual turnover, whichever is higher — but the more common SME outcome is a corrective order, a public finding, and reputational damage with customers.
Most small businesses get caught not because they tried to flout the rules, but because they relied on a cobbled-together UK template, a free “compliance generator”, or no documentation at all.
How it works
- Pay the price shown on this page by card.
- The template, guidance notes and checklist are emailed to you.
- Complete the template yourself using the guidance notes.
- If you want your completed document checked, ask a solicitor of your choice — you can find one through the Law Society of Ireland’s Find a Solicitor directory.
Frequently asked questions
Do I need a Data Protection Officer (DPO)?
Most Irish SMEs do not need a DPO. A DPO is required only in specific cases (large-scale systematic monitoring, large-scale processing of special-category data, public bodies).
Will this cover my use of MailChimp / HubSpot / Stripe / etc.?
The privacy notice covers the use of common third-party processors at a category level.
What if I receive a Subject Access Request?
The pack includes a DSAR procedure with a tracking log, response template, and 30-day workflow. You’ll know exactly what to do.
Are the templates editable?
Yes. You receive both a print-ready document and an editable.docx version, keyed to your business name, address, and the categories of data you handle.