Data privacy and data protection in Ireland

A&L Goodbody LLP

A&L Goodbody LLP’s data privacy and protection team advises a client base which includes numerous household names on the full range of issues in this space. The team provides assistance to clients from the tech sector and beyond with compliance with Irish and European regulations, as well as with responding to data subject access requests. The practice is frequently instructed to advise on international data transfers, while its work on data breaches includes managing investigations by the Data Protection Commission as well as the risks of litigation. John Whelan leads the team and has deep experience in the tech sector; John Cahir and Andrea Lawler are also names to note. The team was recently strengthened by the addition of Chris Bollard, who joined from Matheson LLP in September 2021.

Practice head(s):

John Whelan

Other key lawyers:

John Cahir; Andrea Lawler; Chris Bollard


‘We value the people and the quality of the work.’

‘Andrea Lawler is diligent and thorough.’

Key clients

Digital Europe

Enterprise Ireland

Norton Lifelock Limited

Heineken Ireland





British American Tobacco



Work highlights

  • Advising Digital Europe, as an amicus party, on proceedings in the Irish Commercial Court and the Court of Justice of the European Union concerning the validity of the European Commission’s standard contractual clauses (commonly known as Schrems II).
  • Advising Eir on its implementation of the new standard contractual clauses in line with recent guidance of the European Data Protection Board and on steps necessary to ensure adequate supplementary measures have been put in place with regard to international transfers.
  • Advising PicMonkey on all data protection, privacy and cyber security matters in relation to its operations in Ireland.

Arthur Cox

The data privacy team at Arthur Cox provides advice to clients across a broad range of sectors on both compliance with regulations and responses to data breaches. The team is frequently instructed by technology companies, including established household names as well as start-ups, and assists clients with entering the Irish market. ‘Standout performer‘ Rob Corbet is well versed in advising clients on data breaches and is also recognised for his work in the gambling sector. He leads the team alongside Colin Rooney, who is noted for his experience in regulatory investigations, and Olivia Mullooly.

Practice head(s):

Rob Corbet; Colin Rooney; Olivia Mullooly

Other key lawyers:

Ian Duffy; Caoimhe Stafford


‘Arthur Cox is a market leader. The team is excellent at data protection advisory work and regulatory engagement and investigations, with a finger on the pulse of the regulatory landscape.’

‘Rob Corbet is a standout performer and one of the top privacy lawyers in Europe. He sees the big picture but is also a master of the small print. His consistently excellent work in finding solutions is always impressive. Colin Rooney has a very strong specialism in handling high-profile regulatory investigations and has a strong record in getting results (often against the odds). Caoimhe Stafford is a technically strong associate with a big future.’

‘The breadth of experience is evident in the advice that they provide. It is extremely useful to have lawyers who are actively representing clients with the regulator so that they can provide comparison advice on a frequent basis. The outstanding attribute of this team is the commercial legal advice that is provided every time in a way that is digestible and lands well with the business.’

‘Colin Rooney is a very accessible partner. Not only is he available at short notice but he always finds capacity to support his clients. In addition, he is a very pleasant professional to deal with so senior business leaders are willing to take advice from him as he can demonstrate his expertise and commercial acumen with ease.’

‘An excellent team. The advice is good value: concise, intelligent and to the point.’

Key clients




Flutter Entertainment plc/Paddy Power Betfair plc


Genuity Science

Egis Road and Tunnel


Viridian Group

Trinity College Dublin

Total Produce

University College Dublin

Openmind Networks Limited

Work highlights

  • Advised University College Dublin on a high-profile investigation by the Irish Data Protection Commission pursuant to the GDPR.
  • Advising Viridian Group (including Power NI and Energia) on data protection compliance.

Mason Hayes & Curran LLP

Mason Hayes & Curran LLP stands out for its expertise in acting for clients facing inquiries by the Data Protection Commission, including those resulting from data breaches and alleged violations of the GDPR. The team acts for prominent multinationals in this area, and also provides clients with advice on new product launches and data processing agreements. Practice head Philip Nolan is frequently engaged in matters relating to EU regulations, including the implications of the CJEU’s judgement in the Schrems II case. Oisín Tobin, who was previously based in the firm’s San Francisco office, counts household names in the tech sector among his clients. Robert McDonagh and Jevan Neilen are highly active in this space, acting as lead privacy counsels to a range of clients, and senior associate Áine Quirke is also praised by clients.

Practice head(s):

Philip Nolan

Other key lawyers:

Oisín Tobin; Robert McDonagh; Jevan Neilen; Áine Quirke


‘MHC’s client focus is second to none in the sector. The partners are available, often at short notice, and I have found the associates to be knowledgable and pragmatic. I would rate MHC higher than many London Magic Circle and Silver Circle firms for data protection and privacy, especially in giving pragmatic and up-to-date advice on EU-level developments and the broader sector. For work that requires coverage of multiple jurisdictions, MHC is effective at coordinating with other firms.’

‘Oisín Tobin consistently delivers high-quality and pragmatic advice in a fast-moving sector. Jevan Neilan is a solid partner and is especially good at explaining complex issues remotely. Áine Quirke is a rising star, with great attention to detail and client care.’

‘They are experts on the law, on top of novel and soon-to-be issues, business-friendly, and really understand how to work with high-growth start-ups. They accommodate US West Coast hours and they understand the fast pace and risk tolerance of high-growth companies.’

‘As a US client, Jevan Neilan is responsive, pragmatic and easy to work with. He understands the issues our company deals with, can foresee where we’ll run into future issues and works with us to mitigate risk.’

‘The team stand out for the depth of their expertise, technical knowhow and practical, focused advice, which can be implemented easily within the company – they don’t just explain the theory, they apply the principles.’

‘Oisín Tobin is an experienced and knowledgeable privacy expert. He has deep subject matter expertise and an ability to cut through the technical legal points to deliver actionable advice.’

‘What makes this practice unique is that the people are great. They’re thoughtful, friendly and knowledgeable about our issues. The practice also does a lot of high-profile work, so they’re able to use their experience to advise clients. Their practice also has quality associates who provide excellent work.’

‘What makes the individuals stand out is their reasonable manner and understanding. They have a practical approach to issues. Áine Quirke is exceptional. She is incredibly diligent, thoughtful, responsive and friendly. Philip Nolan is very strategic and decisive. He has a clear understanding of how we should approach certain scenarios.’

‘Oisín Tobin is the star of the show, consistently delivering high-quality and pragmatic advice in a fast-moving sector.’

‘Oisín Tobin is the most experienced and knowledgeable privacy expert that I have ever encountered.’

Key clients






Etsy Ireland

Slack Technologies Limited


Airbnb Ireland


Work highlights

  • Acted for WhatsApp in one of the most high-profile GDPR inquiries by the Irish Data Protection Commission into a US tech multinational.
  • Acted for Facebook in proceedings before the Irish High and Supreme Courts brought by the Irish Data Protection Commission, which resulted in a referral to the Court of Justice of the European Union regarding the validity of standard contractual clauses through which data is transferred from the EEA to the US.
  • Providing ongoing advice to Airbnb on its engagements with data protection regulators across the world.

Matheson LLP

Matheson LLP advises prominent Irish and multinational companies on data privacy matters, assisting clients with compliance as well as in dealing with data breaches, including ransomware attacks. The team advises clients from a range of sectors, including technology as well as the public sector, pharmaceuticals and manufacturing. Practice head Anne-Marie Bohan is particularly focused on acting for financial services clients. Deirdre Crowley is another name to note in the practice and leads on much of the team’s work involving data breaches. Deirdre Kilroy left the firm.

Practice head(s):

Anne-Marie Bohan

Other key lawyers:

Deirdre Crowley


‘Practical, focused advice from a team whose broad knowledge across the various legal issues related to data protection and privacy is particularly valuable. The team understand our business very well and the market we operate in. Very responsive and thorough at the same time in urgent, time-sensitive situations.’

‘The breadth and depth of Anne-Marie Bohan’s knowledge is outstanding. Her highly personable approach and focused advice makes us feel that she is integral to our business.’

Key clients






An Post



Western Union

Permanent TSB

Work highlights

  • Advising Facebook generally on European data protection matters.
  • Supporting the WhatsApp legal team in Dublin on a range of matters relating to data protection.
  • Advising the Adoption Authority of Ireland in relation to all contentious and non-contentions dealings with the Data Protection Commission in the context of managing complex data subject access requests of adoptees.

McCann FitzGerald LLP

A capable, commercial, knowledgeable practice’, McCann FitzGerald LLP has broad expertise in the data privacy space, providing assistance to clients on the processing and transfer of data as well as on responding to data subject access requests. The team is active in fast-growing areas of data privacy, such as issues related to software-as-a-service agreements, and also handles the data-related aspects of M&A transactions and corporate reorganisations. Practice head Paul Lavery acts for private and public sector clients on data protection issues, and Adam Finlay has an equally broad practice. Doug McMahon is another key figure in the team with specialist expertise in the technology space.

Practice head(s):

Paul Lavery

Other key lawyers:

Adam Finlay; Doug McMahon; Mark Ellis; Catherine Walsh


‘Paul Lavery is a standout lawyer in this area. He has vast experience earned over many years of practice and he is extremely adept at navigating the most complex of privacy matters and gives excellent, understandable and quick assistance whenever required. He is extremely approachable and everybody enjoys working with him and respects the quality and nature of the services he provides. We have also worked with Mark Ellis and Catherine Walsh and they are excellent.’

‘A capable, commercial, knowledgeable practice which we rely on to get our data protection position right. Billing wise, this department at McCann FitzGerald have come in under their quoted fee for us a couple of times, which gives them credibility and makes them great value for money.’

‘Adam Finlay is exceptionally calm and knowledgeable, fantastic at knowing and predicting industry trends, pragmatic and generally a pleasure to deal with. There is never any fuss with Adam. He knows his stuff, pure and simple. He will always return a call, and within a reasonable timeframe. No matter how small the matter, we feel we have his full and prompt attention. He is highly trusted by our business.’

‘McCann FitzGerald provides a first-rate service to our organisation. The depth and scale of the expert resourcing which they continue to make available to us, and the efficiency with which they have delivered work products and key outputs, has been of huge assistance with major projects. The team really listen to our requirements and take on board what we are asking them to do – nothing is too much for them. Their technical skills and expertise are market-leading, particularly in understanding the complex ecosystem within which we operate, and their knowledge of the prevailing technology industry and the regulated environment in this area is excellent.’

‘Paul Lavery is a highly experienced data protection expert. He is highly collaborative and goes above and beyond in meeting the requirements of our organisation, no matter what the request and how challenging the timing may be. He is exceptionally pleasant to deal with and his client first attitude means working with him is always a pleasure.’

‘Doug McMahon and Paul Lavery are both down-to-earth people and understand our business inside out. They are the type of individuals who you would spend time outside work with. They are also on top of their game and very knowledgeable.’

‘The McCann FitzGerald team provide expert, fully current and wide-ranging legal opinions and assessments for our business. We depend on continuity of partners and associates within the firm who have built up a detailed knowledge of the particular aspects of the range of business and associated legal complexities involved. The Knowledge Network and Knowledge Hub portal is also a very valuable resource for legal updates and webinars across several key legal areas which are relevant to our business.’

‘McCann FitzGerald have a wide and diverse range of legal experts, access to which is a key consideration for our business. Adam Finlay and Doug McMahon in particular have guided us through several complex projects and have provided invaluable assistance and opinions. Their knowledge and availability (often at short notice) is highly valued.’

Key clients



Law Society of Ireland

Corporate Transaction Support

Transport Infrastructure Ireland

International Law Firms

Navi Group



GDPR Representative Services


Work highlights

  • Advising the Law Society of Ireland on a range of data protection matters.
  • Advising Ervia on data separation and transfer concerns regarding the complex separation of Ervia from Irish Water by 2023.
  • Advising Hostelworld on all aspects of its data protection compliance, including in relation to international data transfers, email marketing, record retention, cookies and user generated content.

William Fry

The data privacy team in William Fry advises a number of prominent clients from the tech sector and beyond on data-related matters. The team provides advice on compliance with regulations at both an Irish and European level, including assisting clients with the launch of new products. In addition, the practice advises on the data protection elements of commercial matters, including outsourcing agreements. Practice head David Cullen is active both in contentious and non-contentious matters. Leo Moore and John O’Connor are also key names in the team; Moore is noted for his broad expertise across the IP, data privacy and technology spaces, while O’Connor has experience with with novel technologies such as blockchain. The team expanded further at senior level when David Kirton was promoted to partner in May 2021.

Practice head(s):

David Cullen

Other key lawyers:

Leo Moore; John O’Connor; David Kirton; Maggie O’Leary; Rachel Hayes


‘William Fry’s data privacy and data protection practice has great strength and depth across the team. The team resource appropriately and are extremely responsive and proactive in providing advice. They have also been extremely resourceful in the past in terms of providing creative secondment arrangements.’

‘William Fry is the market leader when it comes to fintech.’

‘John O’Connor is a stellar lawyer. I rely on him hugely for GDPR matters but also for general blockchain and tech advice.’

‘Leo Moore is beyond doubt technically gifted and one of the most approachable lawyers in the business.’

‘They take the time to get to know our business and our risk appetite to provide business-driven legal advice and practical guidance.’

‘John O’Connor has a breath of knowledge and in-depth understanding of privacy and data protection which really helps to ensure we have a thorough approach to our contractual obligations in these areas. Maggie O’Leary has been a hugely responsive lawyer who has always responded to queries swiftly and with very useful and practical insights.’

‘The William Fry team have a really strong level of technical knowledge about privacy law and are also able to apply it in practice in a commercially savvy manner. In particular, their associates are noted for being very technically strong with an excellent level of training.’

‘Leo Moore is the standout partner on privacy matters and one of the go-to lawyers in this area in Dublin. Rachel Hayes is excellent with very strong technical skills and a business-focused approach.’

Key clients

BSA | The Software Alliance

Facebook Ireland


Tesco Ireland

FREE NOW (formerly MyTaxi)

Smurfit Kappa Group plc





Shop Direct Limited t/a Littlewoods Ireland


Zurich Plc

FBD Insurance Plc

Work highlights

  • Advising BSA | The Software Alliance on its successful application to be admitted as an amicus curiae in a significant case before the Irish and EU courts relating to the EU-US Privacy Shield for international data transfers.
  • Advised on several strategic matters for Facebook Ireland in relation to its existing and new EU products which are aimed at young adults and minors.
  • Acting as the lead data protection and privacy adviser to Smurfit Kappa following the successful rollout of its GDPR Readiness programme.

DAC Beachcroft Dublin

DAC Beachcroft Dublin advises public bodies, manufacturers and technology companies on data privacy matters, assisting clients with compliance with data protection regulations, cross-border data transfers and responding to data breaches. The team is particularly focused on advising clients in the highly regulated insurance and financial services sectors. Rowena McCormack and legal director Aidan Healy are the key contacts in this area.

Practice head(s):

Rowena McCormack; Aidan Healy; Sharon McCaffrey; Joanne Finn

Key clients

Irish Horseracing Regulatory Board

Health Market Research Ireland Limited


Sport Ireland


Wiggin LLP

Work highlights

  • Advising Sport Ireland on data privacy and data protection compliance.
  • Advising Health Market Research Ireland on highly technical data protection issues in relation to anonymisation and pseudonymisation, as well as drafting a legitimate interests assessment template for use within the business.
  • Advising the Irish Pharmacy Union and its members on liaison with the Data Protection Commission, data protection issues with the Health Service Executive, and assisting with the drafting of guidance to assist pharmacies in meeting their obligations under the GDPR.

DLA Piper Ireland LLP

DLA Piper formed its data protection team in 2019 with the hiring of John Magee from William Fry, and has gone on to develop a practice advising prominent clients across both contentious and non-contentious matters in this space. The team provides ongoing advice to clients from the technology, healthcare and financial services sectors on compliance with data protection regulations, including responding to the decision in the Schrems II case. It also advises clients who have experienced data breaches, as well as those facing investigations by the Data Protection Commission.

Practice head(s):

John Magee

Other key lawyers:

Eilis McDonald; Conor McEneaney


‘Our decision to partner with DLA Piper was based on their deep expertise and global presence where they are playing an active role in defining the new standards around AI. They provided thought leadership to us throughout our establishment of our own commitments, policies and contracts in this area and have truly acted as a trusted adviser to our company on every level. I would highlight their flexibility and engagement style which makes a complex and fraught area digestible and most importantly implementable on a legal and operational level. DLA’s combination of expertise, flexibility in billing and structure, and diversity in team and perspective made them a perfect fit and we highly recommend them as a great partner to have by your side on your own journey in this challenging and ever-evolving area.’

‘The team at DLA Piper are excellent and offer an all-in-one privacy and data protection service. DLA are able to offer sector-leading legal advice and then the technology solutions and tools to implement the advice operationally. I find the team innovative in how they approach data protection and also practical. DLA also provide me with the opportunity to receive advice for multiple jurisdictions all under one practice group and the excellent standard is across the board in all of their partners and associates I have worked with. DLA are moving with the times of what clients want in regard to dynamic and forward-thinking legal advice and solutions.’

‘DLA Piper are extremely useful from the perspective of having a global network of lawyers who can provide multi-jurisdictional advice. In addition, the local data protection team add a layer of knowledge of the market and the regulatory environment in Ireland, as well as industry best practice for data protection.’

‘In the first instance, the international footprint that the firm has means that collaboration on a legal matter involving a number of jurisdictions is something that can be readily facilitated, and this is certainly a strength given the global nature of many clients’ services. Secondly, the firm has an innovative approach in the privacy sector with an emphasis on the use of legal tools and methodologies which are of interest to clients such as ourselves.’

‘John Magee and Eilis McDonald are not only subject matter experts in their area but are also solution orientated and practical in their approach. John provides detailed, specific and practical advice on every area. They are incredibly adaptable to my needs as a client and build solutions and provide advice based on my organisation’s needs.’

‘John Magee and Conor McEneaney went above and beyond any other engagement of this nature that I’ve had with another firm. They understood and clearly outlined risks while being cognisant of the commercial realities of the engagement. They both have wonderful knowledge of their specialist subjects but were able to distill the information and produce clear advice that more than exceeded expectations.’

‘John Magee has provided excellent strategic and technical advice. He is responsive and supportive. He has provided a considered legal engagement structure – both financially and in terms of the level of support provided. Conor McEneaney is a strong technical lawyer with considerable experience in the negotiation of commercial contracts.’

‘John Magee’s expertise in data protection and the quality of his work is key, of course, but aside from that his responsiveness is a quality that I would like to highlight.’

Key clients

Allied Irish Banks plc





Applegreen plc

Payoneer Europe

Vodafone Ireland

United Airlines, Inc.

Coca Cola

Work highlights

  • Advising Allied Irish Banks on the creation and subsequent implementation of its compliance and remediation strategy following the landmark ruling in Schrems II on non-EEA transfers of personal data.
  • Acting as primary data protection counsel for the EMEA region for SurveyMonkey.
  • Providing strategic advice to Dropbox on its response to the landmark ruling in Schrems II.

Eversheds Sutherland

Under the leadership of Marie McGinley, Eversheds Sutherland handles all areas of data privacy and data protection, including advising on new product launches as well as ensuring that data processing and other commercial agreements comply with Irish laws. The team leverages the firm’s international links to act for multinational clients, providing ongoing advice to technology companies and assisting with Europe-wide data protection projects. The practice also advises statutory bodies on their data protection obligations, and is instructed by clients to provide crisis response assistance related to data breaches.

Practice head(s):

Marie McGinley

Other key lawyers:

Peter O’Neill; Sophie Delaney


‘The strong team at Eversheds Sutherland are never fazed; they understand our business and bring a wealth of knowledge and experience to the table in this evolving area of data protection and data privacy law. They have always provided sound, clear and practical advice, helping us navigate through some complex situations.’

‘Marie McGinley shows deep experience in this area, and provides balanced and well-thought out counsel to our DPO, managers and directors, and CEO. Her availability and rapid response and turnaround of documents and queries is a really unique attribute in our experience.’

‘Exceptional attention to the needs of the client. The very moment we sat in our first virtual meeting, they immediately understood the issues in contention and the history of the matter, and were quickly providing direction and a clear approach which we were extremely content to pursue.’

‘Marie McGinley has a can-do attitude and is one of the best in her field. Marie’s ability to identify the points in an argument that are game changers and to direct attention to those strengths makes her a standout. No cause is ever lost, as Marie is particularly strong at driving legal arguments with great persuasion. Sophie Delaney has outstanding drafting skills and has such an ability to take what has been discussed and relay it with clarity and style, succinctly delivering her arguments. Eversheds’ data protection and privacy practice is an excellent team.’

‘We have always found Eversheds’ team vastly experienced (at all levels) and understanding of their audience when providing their guidance. We appreciate their flexibility in responding to our queries irrespective of the hour, and that they are always available to provide a more personal touch and pick up the phone when required.’

‘They have been incredibly helpful and always available for us on several urgent data privacy matters. They provide very business-orientated advice with extremely focused attention on priorities, which has helped us to prioritise internally.’

‘Marie McGinley is just in a field of her own in terms of client contact and the ability to understand the internal issues that we face as in-house lawyers. She puts herself in our shoes, avoids providing unhelpful or superfluous advice and is laser focused on just achieving a good outcome for her clients. I cannot recommend her highly enough.’

‘A dedicated data protection team that is very knowledgeable, provides practical advice and has good availability.’

Key clients

Synch Payments DAC

Cyrus One LLC

SafeTnet Digital

SurveyMonkey (now

Glen Dimplex

CSS Holdings Limited

Personal Injuries Assessment Board

Competition and Consumer Protection Commission

Sun Life Financial of Canada

The Pensions Authority

Arachas Insurance DAC

Goffs Bloodstock


Financial Services and Pensions Ombudsman

Insolvency Services of Ireland

Pinewood Health

Turas Mobility Services Limited


Work highlights

  • Acting for Synch Payments DAC, a joint venture between Ireland’s four pillar banks, in relation to the development and launch of an interbank mobile payments solution on the Irish market.
  • Advised Glen Dimplex on all aspects of the successful development and launch of an interconnected IoT radiator system.
  • Advised SafeTnet Digital, a new cyber security platform for any device that has an online presence, on all aspects of data protection compliance and security obligations.

Philip Lee LLP

Philip Lee is active in the data protection space, where it is particularly known for its work on behalf of the Data Protection Commission. The team also advises clients on responding to data breaches. Damien Young, Sean McElligott and Anne Bateman are the key partners to note in the practice.

Practice head(s):

Sean McElligott

Other key lawyers:

Damien Young; Anne Bateman


‘Phillip Lee is easy to recommend. They very quickly understood the complicated relationship that exists between our company and our parent company and clearly understood what needed to be done to ensure that we are GDPR compliant. They were very responsive to our requirements in a particularly unambiguous way that is easily understood.’

‘The values that Philip Lee bring to data protection matters are providing the explanation behind the advice (i.e. what are the rules, guidance and regulations that have shaped the advice), providing the advice in a clearly understandable manner, particularly for the non-legally trained recipient, and being practical and pragmatic and advising that “this is what we would do if we were in your shoes”, while being reflective of the identified risks.’

Addleshaw Goddard (Ireland) LLP

Addleshaw Goddard entered the market in 2022 following its merger with Eugene F. Collins. The data privacy team covers a wide range of matters in this space, providing ongoing advice to clients on the GDPR and assistance with data processing agreements and the data protection aspects of commercial agreements. The practice acts for clients in a number of sectors, including healthcare, the public sector and retail. David Hackett leads the team.

Practice head(s):

David Hackett


‘Can be trusted 100%. We have a longstanding relationship with them and go to them for advice on all aspects of our business. Every time, we have confidence in the advice received and we feel we are in safe hands.’

‘Each person understands our organisation and provides valued advice and support whenever we call upon them. Contacts are always available and work is carried out to the highest standards.’

Key clients

IDA Ireland

BMW Ireland

The National Children’s Research Centre

Flutter PLC (previously PaddyPower Betfair)

Harvey Norman Trading (Ireland) Limited

Harvey Norman Holdings (Australia) Limited

Rosderra Limited


DABL Limited

JD Sports

Medisec Ireland


St John Ambulance Ireland

Marks & Spencer


AA Ireland

Red Flag Consulting Limited

Johnson & Johnson Group (includes Neutrogena Corporation, Janssen Pharmaceutical Companies, DePuy Synthes, Inc.)

Vodafone Ireland

Sambro International

Society for Chartered Surveyors Ireland (SCSI)


ECCU Assurance DAC


Seasalt Limited

Susquehanna International Group


Virgin Media

Tifco Hotel Group

Work highlights

  • Advised Cambridge Education Group on the data privacy aspects of its acquisition of a majority stake of iHeed Health Training.
  • Advised JD Sports on a complex and time-sensitive IT project to update the client’s websites for compliance purposes in order that the placement and processing of cookies was in line with GDPR requirements.
  • Provided advice to the National Children’s Research Centre in connection with its data protection obligations and responsibilities under the GDPR.

Beauchamps LLP

Beauchamps LLP has considerable experience in the data privacy space, providing advice to public sector bodies as well as private companies from sectors including the arts, technology and finance. The team handles the data protection elements of corporate and commercial matters including acquisitions and outsourcings. Maureen Daly leads the team and has many years of experience in this area.

Practice head(s):

Maureen Daly


‘Very proactive with clear and focused advice.’

‘Real understanding of our needs.’

‘They are experts in their field and have made the effort to develop a good understanding of our business.’

Key clients

Glantus Holdings Plc


Ace & Tate Holding BV

Arts Council of Ireland


Nursing and Midwifery Board of Ireland

eCom Solutions Ltd


Ahern Rentals


Codling Wind Park

Work highlights

  • Acted as the Irish legal adviser to Glantus Holdings Plc relating to its admission to the AIM market of the London Stock Exchange and advised on the data protection aspects of the matter.
  • Advising the Arts Council of Ireland on all legal issues, including data protection law.
  • Advised CAS in respect of a software solution agreement, service level agreement and data processing agreement.

ByrneWallace LLP

ByrneWallace LLP advises both public and private sector clients on a range of day-to-day data privacy and protection matters and assists with responding to issues such as data breaches and changes to regulations. The team also acts alongside the firm’s corporate practice to handle the data-related aspects of M&A transactions and provide advice on commercial matters including outsourcing agreements. Sean O’Donnell leads the team, while Zelda Deasy, who was promoted to partner in December 2021, is another key contact.

Practice head(s):

Seán O’Donnell

Other key lawyers:

Zelda Deasy; Kelly Mackey; Aislinn Cullen


‘Aislinn Cullen is dedicated and hardworking. She is always careful and considered in her responses and advice. Aislinn allows me to bounce ideas off her and talk through theories I have or proposed plans. I always feel I can rely on what she advises.’

‘The team explained how they were prepared to invest in us and be part of our growth story. These are not just empty words – they’ve been very good. They spent a lot of time up front getting to know us, and getting to understand our business.’

‘We have worked with a number of law firms over the years but we have been blown away by BW. They are extremely professional and know their subject areas. They just didn’t give us documents, they gave us a fantastic legal framework to scale. Our best investment in 2021.’

‘The data privacy and data protection practice instituted a really useful DPO club function for clients which ran monthly and provided an opportunity to discuss hot topics and receive presentations from members of the BW team. I found this additional element of the service very valuable.’

‘As well as being highly knowledgeable on the issues, the team are highly attentive and respond quickly and efficiently. They are alive to nuance and to specific client demands rather than proffering stock advice or answers.’

‘Kelly Mackey was a standout adviser for us in 2021 on data privacy issues.’

‘Sean O’Donnell provides expert practical advice, drawing on significant experience working on some of the most complex data protection issues in the jurisdiction in recent years.’

‘I have found Zelda Deasy’s expertise in the area to be of the highest level and she always makes herself available to us, sometimes at very short notice. She brings in additional resources where required and can look at things both from a purely legal perspective and with a business understanding. We have also dealt with Sean O’Donnell and found him also to have a very high level of expertise, very good availability and a clear business understanding. All the associates have been very knowledgeable and great to deal with.’

Key clients

Environmental Protection Agency

Mainstream Renewable Power

Integrity 360

Work highlights

  • Advised Mainstream Renewable Power on its data protection compliance framework, including policies, records of processing, contractual processing arrangements and international transfer measures, in advance of the sale of the company.
  • Advising the Environmental Protection Agency on all areas of data protection law, including international data transfers in light of the Schrems II decision, drafting data sharing and data processing agreements and advising of data protection considerations in relation to specific data processing activities.
  • Provided data protection advice to Irish cyber security firm Integrity  360 as part of the acquisition of a majority stake in the business by private equity firm August Capital.


Fieldfisher provides advice to clients on the data protection elements of corporate transactions, as well as the development of new products and commercial agreements, such as software licensing. The practice also assists with responding to data breaches. Julie Austin is the key figure in the team.

Practice head(s):

Julie Austin

Key clients

Kennedy Wilson




Work highlights

  • Advised on the data protection aspects of the sale of Evros to telecoms provider Eir for circa €80m.

Hayes Solicitors LLP

Hayes Solicitors LLP's data privacy practice provides advice to clients on day-to-day matters including the collection and processing of customer data, the use of cookies and data transfer agreements. Other areas of expertise in the team include data subject access requests and data breaches. Laura Fannin leads the team and is supported by colleagues from the firm’s commercial practice.

Practice head(s):

Laura Fannin


‘The ability of the solicitors to advise and guide clients is outstanding; this reflects their detailed knowledge of the subject matter.’

‘The solicitors we engage with are competent, able and responsive people who listen and advise wisely.’

Key clients



Renrew Ltd

Joe Duffy Motors

Windsor Motors

The Irish Times

A.Menarini Pharmaceuticals Ireland Ltd


Greyhound Recycling

The College of Anaesthesiologists of Ireland

Spirit Motor Group

Jaguar Landrover Ireland


Motor Distributors Ireland Limited

Institute of Advertising Practitioners in Ireland

Association of Promotional Marketing Consultants in Ireland

TBWA Dublin



Boys & Girls


State Claims Agency

Mitsubishi Motor Company


Aviate Credit Union

Credit Union Managers Association

Senator Windows

Peugeot Ireland

Medi Checks

Work highlights

  • Advising Take2 Interactive Software UK on the Irish law elements of its acquisition of Nordus for up to $378m, including undertaking a data protection due diligence review of the target.
  • Providing day-to-day advice to The Irish Times on its compliance with data protection and privacy law.
  • Providing day-to-day advice to, Ireland’s leading property and homes portal, in relation to all data protection and e-privacy issues.

LK Shields Solicitors LLP

LK Shields Solicitors LLP advises on data protection matters including data sharing and joint control arrangements, the processing of customer data, IT outsourcing transactions and cookies policies. The practice also provides assistance to clients with the development and launch of new products, ensuring compliance with the relevant regulations. Since publication, Jeanne Kelly left the firm.


‘The LK Shields team are excellent, friendly and high performing.’

‘The individuals are experts which means that they are approachable and able to handle even the most complex issue with ease.’

‘A strong roster of partners with deep knowledge in their respective areas.’

‘They are always available and willing to help at a moment’s notice.’

‘A very joined-up and professional firm with in-depth knowledge of the law. It has its finger on the pulse for technology and data protection work, and a great array of very active clients. It is a really excellent, easily approachable, go-to firm with very personable and technically proficient and invested lawyers.’

Key clients


Jones Day

Aidan Garcia, Sabios

Team Obair

IFS (Integrated Facilities Solutions Ltd)

erisbeg Holdings Limited

Oberg Associates Limited T/A Max Benjamin

Work highlights

  • Advised Saongroup on complex data sharing and joint control arrangements with its corporate clients and assisted with its cookies compliance framework.
  • Provided regulatory advice to Team Obair in an operationally significant and time-sensitive context.


RDJ LLP provides ongoing advice to clients from sectors including education, healthcare and professional services on ensuring that their data processing policies and agreements comply with data protection regulations. The practice also advises clients on reacting to data breaches and on avoiding litigation alleging breaches of the GDPR. Bryan McCarthy and Ricky Kelly lead the team; McCarthy is noted for his GDPR expertise, while Kelly has a broad practice with a particular focus on crisis management.

Practice head(s):

Ricky Kelly; Bryan McCarthy


‘Super responsive in times of crisis. Sound, practical advice with in-depth knowledge of the subject matter. A pleasure to deal with.’

Key clients





Rehab Group

DistilledSCH Group

GTT Communications Inc

SYS Wealth and Financial Planners

Dominos Pizza UK and Ireland Limited

National University of Ireland, Galway


Brookfield Renewable Ireland Limited

University College Cork

Horizon8 Technology Solutions

Dublin City University

National University of Ireland Galway

University College Dublin

State Claim Agency

Waterford Institute of Technology

Eli Lilly

Laya Healthcare


Royal College of Physicians of Ireland

Howard Farms

Údarás na Gaeltachta

Chubb Insurance

Cope Galway

Sanmina SCI

Ulster Bank


Fota Wildlife Park

Cara Partners


Industrial Information Resources

Brightwater Recruitment

Work highlights

  • Providing critical incident response services to Hiscox’s customers, including the end-to-end investigation, management and mitigation of cyber security and personal data breaches.
  • Instructed by the State Claims Agency in relation to the defence of numerous connected Circuit Court claims where plaintiff data subjects are seeking damages for material and non-material loss arising from breaches of the GDPR and the Data Protection Act 2018.
  • Acting as Dublin City University’s legal adviser on all matters relating to data protection, Freedom of Information Act matters and access to environmental information.


Walkers is highly active in data protection matters, providing advice to clients on ensuring that data transfers, service provider agreements and data collection procedures comply with Irish and European regulations. The practice also assists clients with responding to data subject access requests. Of counsel Shane Martin leads the team and has a focus on advising financial services clients.

Practice head(s):

Shane Martin

Other key lawyers:

Conor Daly


‘Practical, pragmatic and solutions-focused advice.’

‘Shane Martin is alive to the practical and operational challenges facing businesses in the application of a myriad of legal and regulatory obligations.’

‘Shane Martin has been great to deal with and always offers practical solutions, responding in a timely manner and looking at the bigger picture as opposed to getting stuck in the weeds.’

‘The team are highly engaged in local regulatory practice and establishing regulatory expectations.’

‘The individuals stand out for their industry knowledge and engagement with regulators, in particular Shane Martin. In addition, they are diligent, hardworking and responsive to client needs.’

‘Walkers are always on hand to answers queries and share any relevant industry updates. They are capable, confident and personable when engaging at all levels.’

‘Conor Daly was hugely helpful. Conor got stuck in to the day-to-day and his knowledge of our business was key.’

‘Conor Daly is responsive, diligent and hard working.’

Work highlights

  • Advised an alternative investment fund manager on data privacy considerations in collecting Covid-19 vaccination status information from employees, as part of its office return initiative.
  • Advised a provider of dental care products on compliance with data privacy requirements.
  • Advised an aircraft leasing platform in relation to ongoing developments impacting international data transfers, including changes to European regulations and the impact of Brexit.