Firms To Watch: Data privacy and data protection

Having opened the Dublin office in June 2022, Bird & Bird advises largely on regulatory enforcement and GDPR compliance under the leadership of Anna Morgan. Ann Henry joined the team at partner level in January 2024.
Placing an emphasis on the TMT, life sciences, and retail sectors, EY Law Ireland, led by Peter Bolger, is carving out a space for itself in data protection and cybersecurity matters, specifically in international data transfer, compliance, and e-privacy.
Maples Group‘s data protection team, spearheaded by Claire Morrissey, is focused on data protection matters related to acquisitions, funding transactions, and investments.

Data privacy and data protection in Ireland

A&L Goodbody LLP

The data protection practice at A&L Goodbody LLP is a 'go-to firm in Ireland for all matters relating to cyber security and data privacy'; it frequently handles mandates surrounding regulatory compliance, data breaches, and cyber security incidents. The practice is headed by privacy and data protection expert John Cahir, who is lauded as 'excellent and extremely authoritative' and is well-versed in handling domestic and cross-border projects. John Whelan has considerable experience advising on compliance and regulatory disputes connected to data privacy and protection. 'Go-to counsel' Chris Bollard also plays a key role in advising clients active in the technology sector on privacy and AI mandates, and Andrew Sheridan is a key contact for data privacy crises and investigations.

Practice head(s):

John Cahir


Other key lawyers:

John Whelan; Chris Bollard; Andrew Sheridan


Testimonials

‘Responsive, commercial and technically excellent. Very user-friendly and excellent in front of clients.’

‘Chris Bollard is our go-to counsel in Dublin. His technical excellence and deep experience is matched by his pragmatic, commercial approach to matters. A real leader in the market, wise and savvy beyond his years.’

‘John Whelan is the one of the best lawyers I have ever worked with, the level of service he provides is unparalleled, and is based on a profound depth of understanding of the issues, backed up by concrete experience.’

‘Chris Bollard stands out for his business-minded, client-focused approach. He is not only very knowledgeable and responsive, but also great to work with!’

‘John Cahir is excellent and extremely authoritative.’

‘In my opinion, the ALG data protection team is the best in Dublin. I’ve worked with quite a few privacy lawyers and ALG takes a practical approach to data processing and privacy issues that I have grown to rely on. The team also delivers advice succinctly and in a way that non-lawyers can understand, which makes implementing their advice across the business much easier.’

‘Chris Bollard’s customer service is unmatched and his experiences with all his different clients gives him a unique perspective unmatched in Dublin. I tend to hire Chris wherever I go and he is the first person I call if an incident occurs.’

‘A&L are our go-to firm in Ireland for all matters relating to cybersecurity and data privacy. As a large global firm, we require a very strong network of local firms where we don’t have a presence, and with the UK leaving the EU, Ireland is a very key jurisdiction. A&L give very solid, commercial advice and immediately get to the gist of a matter often with tight turnarounds.’

Work highlights


Arthur Cox

Arthur Cox is well equipped to handle a vast range of matters, including data protection, data transfers, and cyber security mandates in the energy, entertainment, technology, and telecoms sectors, and its work often includes cross-border GDPR compliance projects. Advising the top data controllers with EU establishments in Ireland, the firm handles matters covering data privacy compliance, data security, digital regulation, cyber security attacks, transfer of personal data, and GDPR breaches. Colin Rooney helms the team and focuses largely on regulatory dealings and negotiations. Rob Corbet is renowned as a ‘go-to’ for AI governance, while Olivia Mullooly has expertise in data breaches and Ian Duffy has extensive experience in international data transfer strategies.

Practice head(s):

Colin Rooney; Olivia Mullooly; Ian Duffy; Rob Corbet


Other key lawyers:

Aoife Coll


Testimonials

‘Both Colin Rooney and Rob Corbet have extensive experience in relation to all types of data protection matters and are always in a position to ensure that legal advice includes strategic insight.’

‘The ability to provide advice across domains and connect the dots. Pragmatic approach to solving problems.’

‘Understanding risk and businesses need to take risk. My go-to firm for data protection and AI governance.’

‘Rob Corbet is my go-to attorney for data protection and AI governance. We work with Rob to set our policies and procedures, using the GDPR and the AI Act as our global standard. Rob right-sizes information and provides advice and insight on future evolution that we have also built into our data program (data protection and AI Governance). I could not think of a better partner.’

‘Colin Rooney is a go-to contact for all data protection related matters. Colin and his team always demonstrate a strong commercial and pragmatic approach when advising us in relation to finding compliant solutions.’

‘Arthur Cox have a very strong data protection and privacy team, combining legal expertise with a practical approach to resolving problems. This enables them to develop practical, compliant solutions, which work for the business.’

‘Working in a complex and fast paced environment, it is very reassuring to have such an expert team just a call away. Colin us is also very strategic, and always has insights to share which go over and above the standard advice.’

‘Very pragmatic and business-focused.’

Key clients

Flutter Entertainment plc


CRH plc


Bytedance


Indeed


Vodafone


Openmind Networks


Meta


Energia


Musgrave plc


Peter Mark


Ryanair


PTSB


Work highlights


  • Advised Indeed on its GDPR compliance programme.
  • Advised CRH on a range of data protection matters.
  • Advised Peter Mark on a cyber security attack in June 2023 and all related issues.

Mason Hayes & Curran LLP

Mason Hayes & Curran LLP maintains its strong reputation as a powerhouse in data privacy and protection for its international blue-chip and next generation technology clients. Notably, the firm acted for Meta in significant international data transfer proceedings, guided by practice head Philip Nolan, who is prominent for handling GDPR compliance projects. Oisín Tobin specialises in privacy by design structures and Robert McDonagh assists with the implementation of transfer and digital compliance programmes. Jevan Neilan helps clients navigate global data breaches and EU technology regulation and investigations.

Practice head(s):

Philip Nolan


Other key lawyers:

Oisín Tobin; Robert McDonagh; Jevan Neilan


Testimonials

Jevan Neilan – There is no skimming across the surface of the issue with Jevan or dipping into the newest fad. He is very thoughtful and considered in his advice and I trust him to have thought about the issue from different angles.’

‘Mason Hayes has a unique ability to translate complex legal advice into practical steps our business can take to navigate risk. Additionally, I’ve never worked with a firm before that has been so adept at learning about the product lines and business needs of their clients- it s like having in-house teammates.’

‘Oisín Tobin and Jevan Neilan go above and beyond to provide top-level service for our company’s needs. Whether anticipating our needs by flagging the latest developments in the AI and Privacy space, translating new regulations into practical product advice, or connecting us with local counsel as we enter new markets– I can always trust Mason Hayes to deliver.’

‘The client care they provide is exceptional. Their approach to build deep understanding of our company and its business and staying close to everything we do gives them a feel and accessibility of an in-house team rather than outside counsel.’

‘The size, breath and variety of individuals with sub-specialties makes this firm stand out.’

‘Mason Hayes’s practice is unique because it forms the hub for the scores of companies operating at the intersection of tech, privacy and AI in Europe. The firm helps clients bridge patch works of rules and differential interpretations across geographies and jurisdictions, which is one of the biggest challenges in emerging fields like privacy.’

‘Oisín Tobin is a power house who can synthesize legal and policy issues from across a range of industries and disciplines, including privacy, data protection and AI. He offers creative solutions by virtue of his encyclopaedic knowledge of the law paired with practical experience advising a range of clients. He takes time to understand the drivers of my business and my sensibilities so that the work product is unique to my needs. It’s a rare skill for a lawyer.’

‘Superb industry knowledge and practical, solution-focussed advisors.’

Key clients

Coinbase Global Inc.


Meta Platforms Ireland Limited


Airbnb Ireland Unlimited Company


WhatsApp Ireland Limited


Fitbit International Limited


Yahoo EMEA Limited


Airtable


Strava Inc


Automattic Inc


Adobe Systems Software Ireland Limited


Work highlights


  • Represented Meta in a complex DPC investigation.
  • Represented Meta in appeal and judicial review proceedings before the Irish High Court, challenging an enforcement notice issued on foot of a binding order of the EDPB.
  • Advised Coinbase on a variety of new product launches in Europe.

Matheson LLP

Matheson LLP’s cross-departmental data protection group assists clients like Microsoft with the full range of matters, including data protection compliance, data transfer agreements, cyber-attacks, cyber security and GDPR compliance. Practice lead Anne-Marie Bohan is particularly well-versed in handling matters at the interface between privacy rules and the requirements of financial services regulation. Michael Byrne advises internet service providers on take-down requests, regularly working on the contentious side of the practice. Deirdre Crowley specialises in advising multinational and enterprise clients on regulatory enquiries. Rory O’Keeffe left the firm in May 2024 while Sarah Jayne Hanna joined the team in 2024.

Practice head(s):

Anne-Marie Bohan


Other key lawyers:

Michael Byrne; Deirdre Crowley; Sarah Jayne Hanna; Carlo Salizzo


Testimonials

‘We have found the team at Matheson to be effective and engaging in ensuring they understand our business.’

‘Carlo Salizzo is very easy to deal with and provides clear advice.’

‘From the outset, the Team of people were engaged and readily available. The nature of the work carried out was both critical and urgent to our business. The Team worked with us though extremely tight deadlines and were forthcoming with excellent advice across a broad spectrum of expertise.’

‘A very knowledgeable team, very engaged from the outset and clear and concise advice throughout.’

‘The team helped navigate us through a high pressure event, with calm and excellent advice.’

‘The team are highly responsive and practical. Advice is clear and delivered in a definite and timely fashion. The level of knowledge possessed by the team is exceptional and always current. It is of great comfort working with this team as you can depend on their clear advice to assist with and solve matters that we work on.’

‘Working with Carlo Salizzo and his team at Matheson is a seamless process. He is efficient, practical and definite. His GDPR knowledge is vast and up-to-date and topics are broken down in a palatable manner, with clear advice.’

‘Matheson has deep knowledge of our business and our DP positions, which makes their advice pragmatic and tailored. Their approach is collaborative, especially for larger projects where the solution isn’t immediately obvious.’

Key clients

Strategic Banking Corporation of Ireland


Curriculum Associates


Chartered Accountants Ireland


Occupli Limited


AIB


An Post


Bank of Ireland


Centric Health


Discord


Glanbia Pensions Trustees


Irving Oil


Microsoft


Monument Life Insurance DAC


Tírlan Pensions Trustees


Twitter


Voyager Aviation Holdings, LLC


WaterWipes


Zoom Video Communications Inc.


Work highlights


  • Advised the Strategic Banking Corporation of Ireland on the data protection aspects of its launch of a €500m Home Energy Upgrade Loan Scheme.
  • Advised Curriculum Associates on the acquisition of AI company Soapbox Labs.
  • Advised the Chartered Accountants of Ireland on a range of matters relating to data protection.

McCann FitzGerald LLP

The team at McCann FitzGerald LLP is adept at handling a large breadth of matters, including those surrounding cyber security, international data transfers, and GDPR compliance, as well as the processing and sharing of data. Alongside advising private sector multinational and local entities in the technology, financial services, and pharmaceutical industries, the group also provides public sector bodies with advice on standalone matters and on large-scale personal data projects in Ireland. Adam Finlay, who oversees the team, and 'first-class data privacy practitioner' Paul Lavery both act as EU GDPR representatives for non-EU companies; Lavery is a specialist in data protection compliance and data transfers outside of the EEA. Doug McMahon is another integral part of the team, working on both contentious and non-contentious matters.

Practice head(s):

Adam Finlay


Other key lawyers:

Paul Lavery; Doug McMahon


Testimonials

‘Paul Lavery has an exceptional skill of making difficult and complex legal matters easy to understand, and is exceptionally practical, pragmatic (and genuinely) enthused about the work, and the clients. Doug McMahon has a combination of very high level of technical knowledge and practical advice difficult to find elsewhere. Adam Finlay is a technically skilled data protection lawyer.’

‘The team has great knowledge and experience in this area, in my view unique among Irish law firms in this regard. They are also very approachable, pragmatic and adopt a common sense approach.’

‘Paul Lavery is our man contact person. He is a first-class data privacy practitioner, among the best if not the best in Ireland. He has vast experience and is an excellent communicator, and gets to the heart of issues very quickly. He is also very much up to speed with developments in this area and is an invaluable resource to our company.’

‘Adam Finlay has great experience not just within the privacy field but also the financial services sector and understands the nuances of working in a complex field with various fund parties across multiple jurisdictions.’

‘Paul Lavery is an acknowledged expert in the sector in Ireland. Doug McMahon is also very knowledgeable and experienced.’

‘The team in McCann Fitzgerald are very personable and easy to work with. Advice is practical and tailored to client needs. Paul Lavery and Doug McMahon are responsive and collaborative – they get the best of their team and out of the client to ensure that the advice is of the highest quality.’

‘Great breath of knowledge. Practical, relevant and comprehensive advice given. Access to specific individuals with areas of knowledge/expertise as required for specific purpose.’

‘Adam Finlay and Doug McMahon – exceptional breath of knowledge and case law. Available and dedicated to meeting challenging objectives.’

Key clients

Alkermes


Gas Networks Ireland


Corporate Transaction Support


Transport Infrastructure Ireland


International Law Firms


Navi Group


Vhi


GDPR Representative Services


National Transport Authority


FLAC


Electricity Supply Board


Road Safety Authority


Uisce Éireann


Work highlights


  • Advised Alkermes on a wide variety of data protection matters, including its international data transfers project.
  • Advised Transport Infrastructure Ireland on all aspects of its data protection compliance.
  • Advised Vhi on a wide range of cutting-edge digital health and technology matters.

Byrne Wallace Shields LLP

LK Shields Solicitors LLP and Byrne Wallace LLP merged at the beginning of 2025 to form Byrne Wallace Shields LLP, with the newly formed team offering experience across the spectrum of privacy and data protection matters. The team provides ‘comprehensive’ advice, with a cross-departmental bench of specialists covering the complete data protection compliance lifecycle, from pre-incident advice, to legislative and regulatory compliance and data breach response. Overseeing the team, Seán O’Donnell focuses on data security and cybersecurity breaches, regulatory investigations, and infringement claims. Zelda Deasy’s practice centres on general data protection work, drafting, reviewing and negotiating data transfer agreements as well as online terms and conditions, data protection policies and privacy and cookies policies. Jane O’Grady has in-depth knowledge of privacy issues in the healthcare and financial services sectors and regularly advises on data protection and cybersecurity aspects of large-scale IT projects.

Practice head(s):

Seán O’Donnell


Other key lawyers:

Zelda Deasy; Jane O’Grady; Robert McDermott; Mona Costelloe


Testimonials

‘Seán O’Donnell, Mona Costelloe and Robert McDermott are excellent litigators who are working on some of the most important and exciting data protection law cases. Their expertise in respect of the latest GDPR knowledge is unparalleled. They are a pleasure to work with; always helpful, highly efficient and friendly.’

‘Seán O’Donnell and Robert McDermott have been very hands on regarding any legal matters we have engaged them with. Very responsive and obliging in responding to queries surrounding their briefs!’

‘We first engaged with Byrne Wallace for advice on GDPR as we use a development and support partner group that are based outside of the EEA. Based on how well we were looked after, they were also engaged to assist us with more general legal advice on commercial contracts. Their advice was extremely clear and detailed.’

‘Our advisor is Zelda Deasy, who makes the whole GDPR minefield much easier to negotiate. She is clearly an expert in her field, which became more obvious when we were dealing with our clients’ own GDPR representatives, both internal and external. They clearly learned a lot from Zelda!! ’

‘Seán O’Donnell is excellent. He is extremely knowledgeable and always obliging. He uses his skill and expertise to make me feel comfortable whenever we discuss complex matters that I may not understand fully.’

‘The team at Byrne Wallace Shields are professional and personable. They are easy to communicate with and are happy to negotiate and improve our position. Zelda Deasy has steered us through many regulatory changes over the years and I trust her implicitly.’

‘Zelda Deasy has exceptional attention to detail, swiftness in response and thorough subject matter knowledge.’

‘Jane O’Grady and her team are very responsive. They reply quickly and are meticulous in their attention to detail. The quality of output is top drawer, which means we can have 100% confidence in implementing/acting on the advice of Byrne Wallace Shields.’

Key clients

Arkema S.A.


Aserve Investigators Limited


Axon Evolution Limited


Circol ELT


Cloudware Limited t/a Aladdin Schools


DKV Euro Service Gmbh + Co. KG


Eastpoint Enterprise Information Solutions Limited


Environmental Protection Agency


Horse Racing Ireland


Local Government Operational Procurement Centre


Marine Institute


Neuromod Devices Limited


NRG Panel


OneProjects Design Innovation Limited


PAM Occupational Health Solutions Limited


Pelco Limited


Phibro Animal Health Limited


Phonovation Limited


Results CX UK Limited


Select Technology Sales and Distribution Limited


ServiceNow Ireland Limited


Tourism Ireland CLG


Tympany Medical Limited


ValitaCell Limited


Zahra Media Group


Greatech Integration


Maître LLC


MCCP


FleetCor Technologies Inc


Work highlights


  • Advised ServiceNow Ireland Limited on data protection compliance requirements.
  • Advised the environmental protection agency on its compliance with data protection law, data protection agreements, transfers outside the EEA, engagement and sharing data with third parties and general ad hoc data protection queries.
  • Advised Select Technology Sales & Distribution Limited on the data protection aspects of the acquisition of D.I.D. Electrical.

DAC Beachcroft Dublin

Clients in the insurance and finance sectors rely on DAC Beachcroft Dublin for its expertise in data privacy policies, cyber-attacks, GDPR compliance, and data sharing, breaches, and collection processes. The firm is well-versed in marrying its technical knowledge of data protection law with its robust understanding of the insurance distribution chain and financial regulations. The team co-heads are Rowena McCormack, who is experienced in security breaches, and Aidan Healy, who has taken the lead on assisting with AI-related matters.

Practice head(s):

Rowena McCormack; Aidan Healy


Testimonials

‘Understood our business and the application of GDPR.’

‘The team delivers a very efficient service and demonstrates considerable knowledge and understanding of this area of the law and, as such, provides insightful and practical advice which is invaluable to a client.’

‘Aidan Healy has an excellent knowledge of this area of the law – he is always very approachable, responsive and practical in the advice he provides. He also has a very good appreciation of a client’s particular needs, which enables him to provide very effective strategic advice.’

Key clients

HDI Global SE


AXA XL


Irish Horseracing Regulatory Board


Irish Ferries Limited


Everest Re Group


AXA XL


AIG


Beazley


Titlesolv


Marsh


HDI Global


QBE


Liberty


AXA XL


AXA Partners


Hiscox


CFC Underwriting


Munich Reinsurance


Irish Council of Civil Liberties


Sport Ireland


Large Construction Client


Beazley


Work highlights


  • Advised a multinational corporate consulting and strategy firm on its notification obligations under the GDPR, following a spear phishing incident.
  • Advised AXA XL’s DPO on all data protection issues, from artificial intelligence and the EU AI Act, preparing a risk assessment process in this regard, to carrying out DPIAs.
  • Advised a host of insurer clients and their insureds on significant cyber breach matters, including engagement with supervisory authorities, forensic IT providers, communications specialists, other service providers and affected data subjects.

DLA Piper Ireland LLP

DLA Piper Ireland LLP is well known for handling a breadth of data privacy and protection matters, with skills in providing advice on data transfer compliance, cyber security breaches and data processing agreements. John Magee spearheads the team and has experience in advising on global data governance matters, as well as on information access requests and regulatory investigations on the contentious side. Conor McEneaney focuses on commercial advisory and transactional mandates, with both him and ‘expert’ Eilís McDonald regularly advising on strategic technology mandates in the financial services sector.

Practice head(s):

John Magee


Other key lawyers:

Conor McEneaney; Eilís McDonald


Testimonials

‘John McGee – very accessible, friendly to deal with, pragmatic advice. Eilís MacDonald – exceptional level of technical expertise for a senior associate, provides very clear written and spoken advice, always absolutely courteous to deal with.’

‘The team is led by a Global expert on data privacy with access to a global network to support engagement with firms. Billing, technology and collaboration is excellent and I have no hesitation is recommending the team.’

‘John Magee is an excellent communicator of data privacy risks and challenges who engages with us to find cost effective solutions.’

‘John Magee is a standout partner on all matters connected with data protection and intellectual property. His relaxed manner makes him easy to deal with and he gets on well with all in the business.’

‘The team has a very broad oversight over the most important developments in the data protection space. They are constantly updating to their tools they provide to clients and thereby make it easy for clients to deal with their day-to-day data protections questions.’

‘John Magee has an outstanding expertise fuelling the whole teams knowledge. Eilís McDonalds whom we often work with combines her legal knowledge with fantastic communication skills which have been instrumental in the implementation of legal projects.’

‘The data privacy and data protection team are exceptionally skilled and bring a great awareness of practical and commercial aspects of projects. The team has a wide global network to call on for experience and insight which is very useful from a client perspective. The Dublin based team is incredibly well connected and well versed in collaboration with that global network which ensures that advice has the added value of implications or standard practice globally.’

‘Eilís McDonald (Senior Associate) is very passionate and has expert knowledge of all aspects of the law on which she provides advice and manages to take complex or nuanced legislative requirements and distill those into practical talking points and provide pragmatic advice. John Magee (Partner) has vast experience of data protection and cyber security matters as well as in depth commercial knowledge which ensures advice and solutions are delivered in a pragmatic and logical manner.’

Key clients

Allied Irish Banks plc


Stripe


Bank of Ireland Group plc


Smurfit Westrock Group plc


Julius Baer Group


Payoneer Europe


Vanguard


TELUS International


3M


OpenAI


Work highlights


  • Advised OpenAI on their decision to move their EU data protection governance function to Ireland.
  • Advised 3M on privacy compliance obligation gaps across the US, EU, and UK.
  • Advised Smurfit Kappa on data protection and privacy matters for post-completion integration.

Eversheds Sutherland

Operating on a global stage, Eversheds Sutherland has deep expertise in advising national and multinational clients on cross-border data transfers, data protection compliance, data security, freedom of information, data disclosure requests, and large-scale ransomware attacks. Appointed to the firm’s international head of technology this year, Marie McGinley heads up the practice and specialises in cybersecurity issues and outsourcing arrangements. Ellie Cater is well-versed in developing emerging technology in line with the privacy-by-design principle. Peter O’Neill left the firm in August 2024 while David Kirton joined the team in October 2024.

Practice head(s):

Marie McGinley


Other key lawyers:

Ellie Cater; David Kirton


Testimonials

‘Beyond their technical skills, the team at Eversheds is dedicated to building strong client relationships.’

‘They are responsive, attentive, and genuinely invested in our success, making the data protection process feel manageable.’

‘I had the distinct pleasure of working with Marie McGinley, whose expertise and technical acumen are truly exceptional. From the outset, it was evident that Marie possesses a profound understanding of the complexities surrounding data privacy regulations, including GDPR and other emerging laws (AI). Marie demonstrated an impressive ability to distill intricate legal concepts into clear, actionable advice.’

Key clients

Momentive AI


Cyrus One LLC


CSS Holdings Limited


Glen Dimplex


T5 Data Centres


Synch Payments DAC


Verisure


Signify Health


BearingPoint


Eaton Corporation


Sun Life Financial of Canada


Arachas Insurance DAC


Turas Mobility Services Limited


EirGrid


SafeTnet Digital


Personal Injuries Assessment Board


Webdoctor


The Pensions Authority


Pinewood Health


Goffs Bloodstock


Insolvency Services of Ireland


Competition and Consumer Protection Commission


DXC Technology


Specsavers


UPMC Ireland


Next


Atlantic Technical University


Therapie Clinic


Commission for Regulation of Utilities


e-ShopWorld Ascendia


Arachas


Work highlights


  • Advised CyrusOne LLC on security-related obligations in Ireland.
  • Advised UPMC on all aspects of the creation of new technology systems internally.
  • Advised Sun Life Financial of Canada on technology and data protection law matters.

William Fry LLP

William Fry LLP is reputed for advising on the negotiation of data protection contracts, regulatory aspects, cyber incidents, data transfer, GDPR compliance, and direct marketing laws. Leading the team is Leo Moore, specialising in transactional matters, outsourcing, and the commercialisation of emerging technologies. David Cullen is well-versed in contracts covering the design, development, and implementation of IT projects. Both Rachel Hayes, who stands out for her deep insight into international personal data flows and breach management, and AI expert Barry Scannell, who regularly advises on the interface between automated decision making and profiling, were promoted to partner in May 2024.

Practice head(s):

Leo Moore


Other key lawyers:

David Cullen; John O’Connor; Rachel Hayes; Barry Scannell


Testimonials

‘The new TechReg tool developed by the William Fry technology team was particularly innovative. We found this tool incredibly useful in helping us gain a clear understanding of the company’s obligations under the new EU Digital Reform Package legislation, in high priority areas like AI and data security. This tool assisted both the in-house team and key stakeholders in the organisation in quickly and effectively getting to grips with a vast range of new EU legal requirements.’

‘I work in an extremely innovative company that consistently launches new products and offerings that push boundaries in the retail utility space. WF are consistently able to advise us on our legal and data protection queries often on a very short deadline.’

‘Very experienced and successful with helping firms in obtaining licences from the CBI. Also, closely involved with new technology/sectors, e.g. digital assets.’

‘William Fry has extensive experience advising large data controllers on compliance projects which few firms can rival.’

‘Their approach is pragmatic but compliance focused, and their track record in regulatory engagement provides insights which are invaluable to businesses who wish to develop a productive relationship with regulators.’

‘Rather than simply restating the law, Leo Moore and Rachel Hayes focus on providing actionable solutions to compliance issues. They are diligent and conscientious in working to the brief provided.’

‘The Technology team in William Fry boasts a great culture and high standards of work produced. The individuals comprising the team work well together and are very focused on delivering high quality and commercially focused legal advice. The team is forward-focused and boasts with experts in areas intersecting with data protection, such as AI and Fintech, which makes the advice ever more valuable.’

‘Rachel Hayes is very smart, sharp and her ability to give relevant and business-focused advice is very valuable; her recent promotion to partner comes as no surprise. She truly is the data protection queen!’

Key clients

LinkedIn Ireland


Tesco


PrepayPower


J&E Davy


FBD Insurance plc


Doyle Hotel Group


Hudson Advisors L.P.


Motor Insurance Bureau of Ireland


The Irish Times


CHDI Foundation Inc.


Riot Games


Work highlights


  • Advised the European headquarters of LinkedIn on data protection matters.
  • Advised Tesco Ireland Limited on some of its most complex, technical data protection mandates relating to its employee assistance programme in Ireland.
  • Advised the Irish Times on a number of data protection and EU technology regulation workstreams.

Addleshaw Goddard

Addleshaw Goddard advises multinational private clients, notably in the retail and telecoms sector, regulatory bodies, and public entities on a range of matters and is particularly adept in regulatory investigations by the Irish Data Protection Commission. Practice head David Hackett primarily advises on GDPR compliance, privacy, and freedom of information matters, while Jane Farren has substantial experience in regulatory investigations, data processing agreements, and transfers of data outside of the EEA.

Practice head(s):

David Hackett


Other key lawyers:

Jane Farren


Testimonials

‘The team is very personable and easy to deal with. They identify our needs quickly and we work at issues together. Our dealings are always satisfactory.’

‘The lead partner sets a good tone and the team are highly qualified and experienced. New team members enter a good culture and quickly settle into the firm’s routines.’

Key clients

An Post National Lottery Limited


Digital Manufacturing Ireland CLG


ASDA


IDA Ireland


BMW Ireland


The National Children’s Research Centre


Flutter PLC


Harvey Norman Trading (Ireland) Limited


Harvey Norman Holdings (Australia) Limited


Rosderra Limited


JCB


DABL Limited


JD Sports


Medisec Ireland


E+Y


St John Ambulance Ireland


Marks & Spencer


CACI Non Life DAC


AA Ireland


Red Flag Consulting Limited


Johnson & Johnson Group


Vodafone Ireland


Sambro International


Society for Chartered Surveyors Ireland


Investec


ECCU Assurance DAC


Applegreen


Petrogas


Seasalt Limited


Susquehanna International Group


iHeed/Cambridge


Virgin Media


Tifco Hotel Group


Work highlights


  • Advised ACER on a number of complex and sensitive data protection issues.
  • Advised B.Braun Medical Ireland Limited on a range of complex data protection issues.
  • Advised NCRC on all aspects of the business transfer agreement.

Beauchamps LLP

Beauchamps LLP's data protection department demonstrates strengths in matters related to data sharing, freedom of information, database right infringement, and GDPR compliance, with a particular emphasis on the technology, financial, health, and retail sectors. Data processing outsource arrangements and international data transfers make up the bulk of co-head Damian Maloney's practice, while co-head Edward Evans has significant expertise advising software and technology clients.

Practice head(s):

Damian Maloney; Edward Evans


Key clients

Cricket Ireland


IDA Ireland


Mazars Ireland


Barnardos


Dwellings Development Limited


Cleveland Clinic (US)


Pobal


CWS International GmbH


Behaviour & Attitudes


Cabot


Famalco


Food Safety Authority of Ireland


HIQA


National Library of Ireland


Work highlights


  • Advised the arts council on all legal issues, including statutory obligations under both data protection and freedom of information law.
  • Advised FSAI on the legality of data scraping from websites of grocery retailers and publishing the analysis based on that scraped data source.
  • Represented GSOC in a case where the client was granted access to a primary and secondary system of audio recordings of a court incident.

Fieldfisher

Fieldfisher’s data protection team is heavily focused on compliance matters, with expertise in the data protection aspects of mergers and acquisitions. Ciara Burke, who joined the team in August 2023, heads the practice and is experienced with data sharing, processing, and transfer agreements.

Practice head(s):

Ciara Burke


Key clients

Law Society of Ireland


The Bar of Ireland


Parole Board


Work highlights


Hayes Solicitors LLP

The team at Hayes Solicitors LLP is proficient in advising clients on GDPR compliance and data transfer, processing, and security breaches. Under the leadership of Laura Fannin, who is reputed for handling both contentious and non-contentious issues, the team advises both private organisations and public bodies. Denise O’Shaughnessy is also highlighted for advising clients on best practice in the AI sector.

Practice head(s):

Laura Fannin


Other key lawyers:

Denise O’Shaughnessy


Testimonials

‘Real commercial focus, always keep at the front of their minds the client’s commercial imperatives.’

‘Laura Fannin is my main contact. Always available, always cuts to the chase. Not afraid to advise on the commercially sound approach.’

‘We highly value and trust Hayes Solicitors in the area of data protection law, in particular.’

‘Laura Fannin is an exceptional professional in her area of expertise. Laura’s expertise of data protection law, especially around cookies and other technologies and the complexity around consent in this context, is unmatched in my experience.’

Key clients

Lisney


SIMI


Renrew Ltd


Joe Duffy Motors


Windsor Motors


The Irish Times


A.Menarini Pharmaceuticals Ireland Ltd


My Home.ie


Greyhound Recycling


The College of Anaesthesiologists of Ireland


Spirit Motor Group


Jaguar Landrover Ireland


Deloitte


Motor Distributors Ireland Limited


Institute of Advertising Practitioners in Ireland


Association of Promotional Marketing Consultants in Ireland


DriveYou


Alliance Medical


TBWA Dublin


Promontoria


Cerberus


PwC


Smith & Williamson


Publicis


Ogilvy


Boys & Girls


ESRI


State Claims Agency


Mitsubishi Motor Company


INTO


Aviate Credit Union


Credit Union Managers Association


Senator Windows


Peugeot Ireland


Tallaght University Hospital


CMS Cameron McKenna Nabarro Olswang LLP


Critical Care Partners


Park Academy Childcare


Supermac’s Ireland


Office of the Inspector of Prisons


Skytek


CLRG


US Department of Justice


GLS


Groupon


Skytek


Gowan Group


Ornua


Work highlights


  • Assisted the US Department of Justice with the providing of expert evidence to a US Court on the transfer of personal data from the EU to the US.
  • Advised Noel Kelly Management on the data protection issues arising from the state broadcaster’s (RTE), plan to implement a register of external activities.
  • Advised the Irish Times Group on comprehensive and strategic data protection and privacy aspects.

Pinsent Masons LLP

Pinsent Masons LLP's privacy department’s primary area of focus is financial service outsourcing work and data regulation matters. The firm is well-positioned to advise on matters related to data breaches, GDPR compliance, and freedom of information. Co-head Andreas Carney has over two decades of experience in both transactional and advisory data protection work; alongside Carney, Maureen Daly has extensive experience with regulatory bodies.

Practice head(s):

Andreas Carney; Maureen Daly


Testimonials

‘Valuable, pragmatic advice, based on deep knowledge of our business.’

Key clients

Mercer (Ireland) Limited


Barclays Bank Ireland


Barclays Bank PLC


Allied Irish Banks, p.l.c.


Work highlights


  • Advised a Semi-state body on all issues relating to FOI law, such as advised on the appeal to the Office of the information Commissioner in respect of its decision not to release certain information in response to a FOI request.
  • Advised, on a retainer basis, Barclays Bank on its contract remediation project to deal with international transfers.
  • Advised a State-owned commercial company on a ransomware attack which involved advising the client on the possibility of applying to Court for an injunction to prohibit the publication of stolen data, liaising with its IT service providers, and advised on the reputational management arising from the attack.

RDJ LLP

RDJ LLP is well-versed in the full spectrum of matters in relation to GDPR compliance and cybersecurity, particularly in data breaches, from investigation through to recovery. Ricky Kelly, head of the practice, has deep experience in managing the entire end-to-end investigations process, including the mitigation of cybersecurity issues.

Practice head(s):

Ricky Kelly


Testimonials

‘The team is extremely responsive and has a really deep knowledge of data protection issues and how to interpret the relevant legislation at a practical level.’

‘Ricky Kelly has been a reliable point of contact for years with respect to our data protection crisis management. He generally responds within the same day and provides an initial steer followed by more detailed conversations and advice. He is approachable, helpful and really quick thinking and solution focused.’

‘Professional, supportive and always go the extra mile.’

‘Attention to detail; understanding our institutional quirks.’

‘The team simplify requirements very well. They work collaboratively with me to understand what I need, help me understand what can be done. I feel I have a partner in meeting the necessary timelines.’

‘Collaborative, personable, engaging, knowledgeable.’

Key clients

Hiscox


Aviva


IICP college


Travelers


Allianz


Bon Secours Hospital Group


Carechoice nursing home group


CFC Underwriting Limited


Industrial Information Resources


Pepsico


Carbery


Renalytix AI Limited


Medtronic


Tornier Orthopaedics Limited


Phenox Limited


Bourn Electronics


Delcath Systems Limited


Rehab Group


Fota Wildlife Park


Oasis Group


Dovea Genetics


Eventhaus


Sorensen Engineering


University of Galway


University College Cork


Dublin City University


Trialview


University College Dublin


Examiner Group


Southern Star


Cara Partners


Dun Laoghaire-Rathdown County Council


Hovione


Laya Healthcare


Cognate Health


Marymount University Hospital and Hospice


Atacana Group, Inc


Geowox


Ombudsman For Children


Royal College of Physicians of Ireland


Cyara Ireland


Exa Infrastructure


DistilledSCH Group


Munster Rugby


Connacht Rugby


Irish Amateur Rowing Union Company Ireland


PFH Technologies


Abtran


Client Solutions Limited


Ulster Bank


Pepper Asset Servicing


Clearstream Global Services


Evo Payments International GmbH


O’Leary Life and Pensions


Morgan McKinley


Brightwater Recruitment


Social Talent Network


Shuz 4 U Limited


Lidl Limited


Egislagan


Enva


GoSafe


Metro Hotel Santry


Trigon Hotel Group


AutoGlass Limited


Fenergo


Musgrave Retail Limited


Techrete Limited


Unijobs


Allpro Security Services Limited


HIU Investments Limited


Dupont Nutrition Ireland


Bio-medical Science Limited


Volunteer Ireland


Charities Institute


Fruedenburg Medical


Greyling Properties Limited


Irish Management Institute


Nurture Childcare


Clarendon Limited


Chaucer Underwriting Limited


Mainline Utilities Group Limited


GTS Consulting Limited


Work highlights


Walkers

Heavily active in non-contentious mandates, Walkers’s data privacy team has a strong fintech offering and largely focuses on regulatory risk and compliance matters. The team is led by Shane Martin, who is a regulatory expert and advises across the banking, funds, and payment services sectors.

Practice head(s):

Shane Martin


Work highlights