Don’t do SECURITY. Do business SECURELY.
Threat intelInsightsBook a consultation
Back to all insights

Ireland’s Data Protection Act 2018 commences

Ireland’s Data Protection Act 2018 takes effect alongside the GDPR and establishes the Data Protection Commission.

Ireland’s Data Protection Act 2018 commences today, supplementing the GDPR and establishing the Data Protection Commission (DPC).

Key points

  • Gives further effect to the GDPR in Irish law.
  • Replaces the Data Protection Commissioner with the Data Protection Commission.
  • Sets out the DPC’s investigation and enforcement powers.
  • Makes provision for areas left to member states, such as the age of digital consent.

Because many global technology companies have EU headquarters in Ireland, the DPC is lead supervisory authority for them, and its decisions will shape how UK organisations’ suppliers handle personal data.

Source: Data Protection Act 2018 (Irish Statute Book)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

Get our weekly insights by emailA free weekly threat and vulnerability round-up with a link to our threat log spreadsheet, plus legal, regulatory, standards, and AI updates.
Subscribe free

How we can help: consulting, auditing, and AI governance. Book a complimentary consultation.

More insights