Data protection, the DPC, and the data you already hold
The GDPR has applied here for eight years, and it is still the law behind the Irish enforcement decisions you can read.
The AI Act gets the attention. The GDPR is the regulation behind the Irish enforcement decisions you can read, which the Data Protection Commission publishes.
These articles cover the parts of it an Irish small business deals with. Whether a data protection impact assessment (DPIA) is required or just advisable. What a privacy notice has to say and when you have to give it. Whether a US supplier can lawfully receive your data. What happens in the first seventy two hours after a breach.
Some rules are specific to Ireland. The DPC has published a binding list of the kinds of data use that need a DPIA. Ireland sets its own age of digital consent. Separate rules for health research cover private companies as well as universities.
17 articles on this
- GDPR
What does GDPR compliance cost a small Irish business?
5 minute read · 8 sources - GDPR
A record of processing for a small Irish business: what goes in it, and whether you need one
16 minute read · 17 sources - Marketing and ePrivacy
When an Irish business can send marketing email and texts without consent
19 minute read · 36 sources - GDPR
CCTV in an Irish shop, salon, clinic or office: before the cameras go up, and after
15 minute read · 16 sources - GDPR
Does a small Irish business need a Data Protection Officer?
16 minute read · 25 sources - Cookies
Does your website track visitors before they say yes? How to check it yourself
18 minute read · 31 sources - GDPR
A subject access request has arrived. What you owe, and by when
22 minute read · 24 sources - GDPR
GDPR for a small Irish business, and what the Data Protection Commission deals with
18 minute read · 33 sources - Compliance deadlines
The legal clocks that can start running against an Irish business, and what starts each one
21 minute read · 28 sources - GDPR
Health research in Ireland: explicit consent, and the way around it
8 minute read · 6 sources - GDPR
You have had a data breach. What the first 72 hours require
22 minute read · 20 sources - Cookies
Cookie banners in Ireland, and what the DPC said
21 minute read · 28 sources - GDPR
Sending personal data to the US from Ireland, in 2026
11 minute read · 7 sources - GDPR
Do you need a DPIA? Ireland has its own list, and it is specific
10 minute read · 11 sources - GDPR
An SEO plugin update exposed board reports, and the Data Protection Commission made three findings
7 minute read · 4 sources - GDPR
Does a small Irish business website need a privacy notice?
10 minute read · 11 sources - GDPR
AI in hiring: the rule that is already in force
10 minute read · 11 sources