International Comparative Legal Guide to: Cybersecurity 2019 - 2nd Edition

Ireland's Data Protection Commission received a record 16,160 new cases in 2025, marking a 45% increase from the previous year, while imposing over €530 million in administrative fines. The Commission finalized four major inquiries, with the TikTok decision accounting for €530 million of the total penalties, and concluded 208 cross-border complaints as Lead Supervisory Authority.

The European Commission has issued interpretive guidelines on Article 50 of the AI Act, clarifying transparency obligations for emotion recognition systems, biometric categorization, and deepfake content.

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.

Today the European Commission published its much anticipated decision on the new standard contractual clauses ("SCCs") for the transfer of personal data from the European Union to third countries, and the template SCCs.

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.

The European Data Protection Board's 2025 Annual Report reveals significant developments in EU data protection enforcement and regulatory cooperation. With approximately €1.15 billion...

The Irish High Court has clarified the scope of statutory exemptions under the Data Protection Act 2018, ruling that organisations can legitimately refuse data subject access requests when legal privilege, client confidentiality, or litigation interests are at stake. This landmark decision establishes clear boundaries between different exemption provisions and confirms their compatibility with GDPR Article 23, providing much-needed guidance for organisations navigating complex disclosure obligations.

On 17 December 2024, the European Data Protection Board ("EDPB"), following a first of its kind request from the Data Protection Commission ("DPC") under Article 64(2) of the GDPR...

The European Court of Justice's Advocate General has delivered an opinion suggesting that the proportionality of data retention regimes should be assessed not only by the categories of data retained, but also by the technical arrangements surrounding that retention. This opinion raises questions about whether Ireland's 2022 Communications (Retention of Data) (Amendment) Act provides sufficiently...

The Court of Appeal has upheld a decision finding that an employer was not responsible as a data controller for personal data stored on a work device. The case arose from a 2021 HSE cyberattack where an employee's personal accounts and cryptocurrency were compromised on his work phone. The ruling clarifies the scope of data protection complaints and the extent of regulatory investigation obligations.

CIMA’s new AML / CFT / CPF Compliance Rule and Sanctions Rule, effective 18 September 2026, introduce binding compliance, governance, risk management and sanctions screening requirements for all regulated financial service providers in the Cayman Islands.

Our corporate team were happy to advise AMCS on their latest acquisition as the business continues to grow their international footprint and scale.

Most often, businesses gravitate towards the LTD model due to its familiarity and simplicity. However, DACs and Irish Collective Asset Management Vehicles...

The Cyber Resilience Act (Regulation (EU) 2024/2847)1 (“CRA”) establishes horizontal cybersecurity requirements for products with digital elements (“PDEs”) placed on the European Union (“EU”) market. Reporting obligations took effect on 11 September 2026, with full application of the CRA from 11 December 2027.

On 24 July 2026, China's Ministry of Finance and State Taxation Administration jointly issued the Announcement on Individual Income Tax Matters Relating to Offshore Trusts (《财政部 税务总局关于离岸信托个人所 得税有关事项的公告》) (Announcement No. 21 of 2026) (the "Notice"), together with a companion Announcement of the State Taxation Administration on Collection and Administration Matters Relating to Individual Income Tax on Offshore Trusts...

An overview of the Cayman Islands fund finance market, highlighting H1 2026 trends, data and outlook, including transaction activity, subscription line and NAV facility developments, financing terms, pricing trends and market expectations for the second half of 2026.

In this month's Cayman Islands Regulatory 15/15 episode, Chris Capewell, John Dykstra and Ellen O'Brien discuss reinsurance updates, CRS compliance obligations, new AML return requirements for regulated trust companies, CIMA's updated List of Approved Stock Exchanges and recent CIMA notices relating to struck-off entities and non-compliant directors.

An overview of the European fund finance market, highlighting H1 2026 trends, data and outlook, including transaction volumes, jurisdictional preferences and emerging financing trends. This forms part of the August 2026 Edition of FUNDed

Alibaba, which operates one of the world's largest e-commerce platforms, became, in 2019, the first overseas issuer to complete a dual secondary listing on the HKSE.