Insights
What the rules say
Each article lists its sources and the date FourWinds last checked it against the law. None is legal advice.
By subject
All articles, newest first
- Cyber insurance
What does it cost to meet cyber insurance requirements in Ireland?
6 minute read · 8 sources - Email security
What does DMARC set-up cost?
5 minute read · 6 sources - GDPR
What does GDPR compliance cost a small Irish business?
5 minute read · 8 sources - Choosing help
Secured and proven or a managed IT provider: which do you need?
5 minute read · 4 sources - GDPR
A record of processing for a small Irish business: what goes in it, and whether you need one
16 minute read · 17 sources - Marketing and ePrivacy
When an Irish business can send marketing email and texts without consent
19 minute read · 36 sources - GDPR
CCTV in an Irish shop, salon, clinic or office: before the cameras go up, and after
15 minute read · 16 sources - EU AI Act
Your staff use ChatGPT. What the law asks, and a policy to adopt
15 minute read · 13 sources - Backups
Your backup shows green. What the GDPR and an insurer expect you to show
16 minute read · 23 sources - Cyber security
Two-step sign-in on every mailbox: turning it on, and proving it
15 minute read · 40 sources - GDPR
Does a small Irish business need a Data Protection Officer?
16 minute read · 25 sources - European Accessibility Act
What an Irish online shop's accessibility statement must say, and who does not need one
17 minute read · 17 sources - Cookies
Does your website track visitors before they say yes? How to check it yourself
18 minute read · 31 sources - GDPR
A subject access request has arrived. What you owe, and by when
22 minute read · 24 sources - Payment fraud
A supplier emails new bank details. What should happen next
18 minute read · 18 sources - Email security
Can someone send email as your business? What SPF, DKIM and DMARC decide
23 minute read · 23 sources - NIS2
Your customer is under NIS2. What they will ask you, the supplier
23 minute read · 18 sources - GDPR
GDPR for a small Irish business, and what the Data Protection Commission deals with
18 minute read · 33 sources - Compliance deadlines
The legal clocks that can start running against an Irish business, and what starts each one
21 minute read · 28 sources - Cyber insurance
What a cyber insurer asks an Irish small business, and how to answer it truthfully
18 minute read · 19 sources - Cyber security
A customer wants a security standard. CyFun, ISO 27001 or Cyber Essentials?
17 minute read · 28 sources - Automation
Automating something that touches personal data: what has to be written down
9 minute read · 5 sources - Measurement
What you are allowed to measure before anybody clicks accept
8 minute read · 3 sources - Regulators
Who regulates what online in Ireland, and who can contact you
9 minute read · 8 sources - Digital Services Act
Does the Digital Services Act apply to an Irish online shop?
10 minute read · 5 sources - Cyber Resilience Act
Does the Cyber Resilience Act cover a website, or a SaaS?
9 minute read · 4 sources - NIS2
NIS2 is not Irish law yet. Here is when it still reaches you.
22 minute read · 29 sources - European Accessibility Act
WCAG AA on an Irish website: what the law asks, and what to fix
10 minute read · 9 sources - European Accessibility Act
Does the European Accessibility Act apply to your website?
10 minute read · 7 sources - GDPR
Health research in Ireland: explicit consent, and the way around it
8 minute read · 6 sources - GDPR
You have had a data breach. What the first 72 hours require
22 minute read · 20 sources - Cookies
Cookie banners in Ireland, and what the DPC said
21 minute read · 28 sources - GDPR
Sending personal data to the US from Ireland, in 2026
11 minute read · 7 sources - GDPR
Do you need a DPIA? Ireland has its own list, and it is specific
10 minute read · 11 sources - EU AI Act
Who regulates AI in Ireland, and which one is yours
20 minute read · 19 sources - EU AI Act
AI literacy: a real duty, and nothing you have to buy
8 minute read · 11 sources - EU AI Act
Does your chatbot have to tell people it is AI? Yes, unless that is obvious.
9 minute read · 6 sources - EU AI Act
Does the EU AI Act apply to my business?
14 minute read · 11 sources - European Accessibility Act
Being a microenterprise exempts your website. It does not exempt your shelf.
16 minute read · 13 sources - Cyber Resilience Act
If you ship software, a 24 hour reporting clock has applied since 11 September 2026
9 minute read · 5 sources - Measurement
What server-side conversion tracking does, and what it does not
11 minute read · 7 sources - GDPR
An SEO plugin update exposed board reports, and the Data Protection Commission made three findings
7 minute read · 4 sources - Funding
Irish digital grants in 2026: the one that closed, and the one that did not
6 minute read · 4 sources - Run
What Run, our monthly service, covers
3 minute read · 1 source - GDPR
Does a small Irish business website need a privacy notice?
10 minute read · 11 sources - Integrations
What it takes to connect Revolut Business to your accounts package
8 minute read · 3 sources - Funding
What Irish state funding for AI pays for
8 minute read · 12 sources - GDPR
AI in hiring: the rule that is already in force
10 minute read · 11 sources - EU AI Act
Article 25: when using AI makes you its provider
10 minute read · 7 sources - EU AI Act
The EU AI Act: what starts on 2 December 2026, and what waits until December 2027
24 minute read · 23 sources