Practice Areas

Home Practice Areas Data Protection & Privacy

Data Protection & Privacy

Tech
Related Sectors
Sports & Entertainment
Technology, Data & Comms
Life Sciences, MedTech & Healthcare

Key Contacts

David Cullen

David Cullen

Partner

Leo Moore

Leo Moore

Partner

John O’Connor

John O’Connor

Partner

View All

Our experience includes advising/acting for:

  • BSA | The Software Alliance, the advocate for the global software industry whose members include Microsoft, Apple, Oracle, Salesforce, Workday, Intel and Siemens, in its role as an amicus curiae in the Schrems II litigation relating to international data transfers.
  • An Irish nutrition group on drafting data sharing agreements; advising on responses to subject access requests, and updating privacy notices to account for new data processing activities.
  • A social media company, on cryptocurrency licences and blockchain in the context of data protection.
  • An Irish cybersecurity platform, on implementing a data protection compliance strategy; and negotiating agreements on the implementation of the new Standard Contractual Clauses.
  • A leading blockchain software company, on engagement with the relevant data protection regulator in relation to a data subject access request and its GDPR compliance obligations.
  • An international online retail marketplace, advising on direct marketing, international data transfers including to the UK post-Brexit, advising on an inquiry by the Data Protection Commission (DPC) and defending a court action for prosecution.
  • A market-leading web-based survey company, on data security and data protection matters including transactional data protection matters, DPIAs, cookies and tracking technologies, and international data transfers.
  • A financial software company, on drafting and negotiating data protection agreements with its customers and suppliers, as well as drafting key data protection compliance documentation.
  • A global HealthTech company, to launch its app in the European Union and assistance with various regulatory matters with several European regulatory bodies, marketing, DTIAs and DPIAs.

Areas of Expertise

  • EU General Data Protection Regulation
  • Data Protection Policy & Framework Development
  • Data Protection Audits & Reviews
  • Data Protection Training & Awareness Programs
  • Data & Privacy Officer Support
  • Privacy Impact & Risk Assessments
  • Data Sharing & Disclosure
  • International Transfers
  • Website & App Privacy Solutions
  • Outsourcing & Third Party Processing
  • Cybersecurity
  • Cloud Computing
  • Direct Marketing & Online Behavioural Advertising
  • Data Access Requests
  • Data Breach Management
  • Employment & Data Protection
  • Enforcement & Litigation
  • Strategic Data & Risk Management
Litigation & Investigations
Technology, Data & Comms

Related News & Insights

See all
Article and Insights
19
Dec 2024
Unwrapping the EDPB’s Guidance on AI models and Data Protection
This article examines the European Data Protection Board’s Opinion 28/2024, which ...
Barry Scannell
Partner
Barry Scannell
Article and Insights
16
Dec 2024
The Future of Product Liability under Revised EU Directive
Revised Product Liability Directive effective from December 2024 and must be trans...
Partner
Mary Cooney
Article and Insights
4
Dec 2024
Legal News – December 24
Here is a selection of recent podcasts and publications contained in our December ...
Article and Insights
15
Nov 2024
(Un)Lawful Data Scraping + Personal Data = Data Protection, Contractual and Other Rules Apply
On 28 October 2024, sixteen international data protection regulators reaffirmed, t...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
6
Nov 2024
Legal News – November 24
Here is a selection of recent podcasts and publications contained in our November ...
Article and Insights
1
Nov 2024
Ireland Designates Nine Authorities to Safeguard Fundamental Rights Under the EU AI Act
On 31 October 2024, the Minister of State for Trade Promotion, Digital and Company...
Barry Scannell
Partner
Barry Scannell
Article and Insights
24
Oct 2024
Munster In-House Lawyers Confident of their Organisations’ Data Protection Preparedness
96% of in-house lawyers in Munster believe their organisation is prepared to handl...
Consultant
Gail Nohilly
Article and Insights
7
Aug 2024
Legal News – August 24
Here is a selection of recent publications contained in our August 2024 edition of...
Consultant
Gail Nohilly
Article and Insights
29
Jul 2024
DPF: A Year in Review as EDPB Publishes New FAQs
A year after the introduction of the EU-US Data Privacy Framework (DPF), US and EU...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
26
Jul 2024
European Regulators Chime in on the Interplay between Data Protection and AI
In this article, we take a look at recent guidance from the European Data Protecti...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
24
Jul 2024
The Time to (AI) Act is Now: A Practical Guide to Regulatory Sandboxes Under The AI Act
This practical guide addresses the AI Act's provisions on regulatory sandboxes, hi...
Barry Scannell
Partner
Barry Scannell
Article and Insights
19
Jul 2024
The Time to (AI) Act is Now: A Practical Guide to Emotion Recognition Systems Under the AI Act
Emotion recognition systems will now be regulated under the AI Act. These systems,...
Barry Scannell
Partner
Barry Scannell
Article and Insights
18
Jul 2024
The Time to (AI) Act is Now: A Practical Guide to Biometric Categorisation Systems Under The AI Act
This article provides a practical guide to compliance with the AI Act's regulation...
Barry Scannell
Partner
Barry Scannell
Article and Insights
16
Jul 2024
The Time to (AI) Act is Now: A Practical Guide to the AI Act
The EU's Artificial Intelligence Act (the AI Act) is a landmark regulation aimed a...
Barry Scannell
Partner
Barry Scannell
Article and Insights
12
Jul 2024
AI, ChatGPT and the EDPB: Regulatory Insights from Taskforce Report
ChatGPT Report outlines European data protection regulator's preliminary views on ...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
24
Jun 2024
William Fry AI Summit: Key Insights
William Fry's AI Summit saw AI, data, law and policy experts discuss the opportuni...
Partner
Leo Moore
Article and Insights
6
Jun 2024
Legal News Podcast – June 24
Here is a selection of recent publications and podcasts contained in our June 2024...
Knowledge Lawyer
Jane Balfe
Article and Insights
27
May 2024
Train, Don’t Blame! Postal Marketing under the GDPR
Court of Justice of the European Union (CJEU) dismisses controller's attempt to av...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
24
May 2024
GDPR Turns Six: Six Things to Expect and Plan For
As the GDPR turns six, we identify six key areas businesses should expect change
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
2
May 2024
Legal News Podcast – May 24
Here is a selection of recent publications and podcasts contained in our May 2024 ...
Consultant
Gail Nohilly
Article and Insights
19
Apr 2024
EDPB Issues Opinion on ‘Pay or OK’ Consent Models Applied by Large Online Platforms
The EDPB has issued an opinion on the use of "Pay or OK" consent models by large o...
Partner
Leo Moore
Article and Insights
7
Feb 2024
Legal News Podcast – Feb 24
Listen to our Legal News Podcast where we discuss the approval by the Irish High C...
Knowledge Lawyer
Aisling Doran
Article and Insights
26
Jan 2024
Data Protection Day: Expectations for 2024 & 2023 Look Back
William Fry is celebrating the Council of Europe’s annual Data Protection Day toda...
Partner
Leo Moore
Article and Insights
18
Jan 2024
New Government Legislation Programme: Industry & Sector Breakdown Spring 2024
The Cabinet has approved 24 bills for priority publication and 22 bills for priori...
Consultant
Gillian Lynch
Article and Insights
18
Dec 2023
A Legal Dialogue on the AI Trilogue
The EU reached political agreement on the AI Act. In this article, we take a look ...
Barry Scannell
Partner
Barry Scannell
Article and Insights
8
Dec 2023
ECJ Says No in SCHUFA Case: New Decision on Automated Decision Making
In a significant ruling on automated decisions, the European Court of Justice dete...
Barry Scannell
Partner
Barry Scannell
Article and Insights
21
Nov 2023
DSARs: Motive and a Coordinated Action
DSARs: motive is not a relevant factor to Europe's highest court and regulators wi...
Partner
David Cullen
Article and Insights
13
Nov 2023
The Art of Staying Anonymous: Game-Changing Decision for Data Anonymisation
A recent European court decision has shifted the goalposts on the standard of data...
Partner
Leo Moore
Article and Insights
29
Sep 2023
Data Scraping + Personal Data = Data Protection Rules Apply
12 international data protection and privacy regulators issued a joint statement a...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
4
Aug 2023
The Data Act – Unlocking the EU’s Data Economy
On 14 July 2023, the committee representing the Council of the EU formally agreed ...
Partner
Leo Moore
Article and Insights
31
Jul 2023
Health Information Bill 2023: the Potential to Revolutionise How Healthcare Information is Shared in Ireland
On 22 June, William Fry and the Irish Pharmaceutical Healthcare Association co-hos...
Article and Insights
12
Jul 2023
Irish Circuit Court Values Non-Material Damage Data Protection Claim
First award of damages in a data subject claim given by an Irish Court.
Senior Associate
Adele Hall
Article and Insights
11
Jul 2023
Third Time Lucky? European Commission Adopts Adequacy Decision for EU-US Transfers
Trans-Atlantic businesses breathe a welcome sigh of relief as Didier Reynders, Com...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
5
Jul 2023
Copy That: “Faithful and Intelligible Reproduction” is the Standard for DSAR Responses
Right of Access: European Court clarifies the meaning of a 'copy' of personal data...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
29
Jun 2023
Green Light for EU-US Transfers? Adequacy Decision for USA is in Sight
Green light for EU-US transfers? Meta appeal against DPC Decision remains on hold ...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
14
Jun 2023
Court Judgment Addresses Use of CCTV Footage in Disciplinary Proceedings
The recent Circuit Court decision in Simon McVann v Data Protection Commission [20...
Paul Convery
Partner
Paul Convery
Article and Insights
4
May 2023
Significant CJEU Ruling on Right to Compensation for Non-Material Damage for GDPR
The Court of Justice of the European Union has found that mere infringement of the...
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
23
Feb 2023
Non-material Damage for Data Protection Breaches before the Irish and EU Courts – Clarity Ahead?
Data protection claims are in the dock.
Rachel Hayes
Partner
Rachel Hayes
Article and Insights
19
Jan 2023
Generative AI Generates Infringement Litigation
Following the explosion of generative AI systems into the mainstream in 2022, the ...
Barry Scannell
Partner
Barry Scannell
Article and Insights
18
Dec 2022
Christmas comes early for EU-US Data Transfers
The European Commission publishes a draft implementing decision to adopt an adequa...
Rachel Hayes
Partner
Rachel Hayes
Announcement
21
Nov 2022
The Artificial Intelligence Act
In the first of our Laws for a Digital Future segment of our Digital Transformatio...
Barry Scannell
Partner
Barry Scannell
Article and Insights
1
Nov 2022
Can a Competition Authority Assess a GDPR Breach?
Partner
Cormac Little SC
Article and Insights
26
Oct 2022
Record Fine Imposed on Instagram owner Meta for GDPR Infringement
Article and Insights
13
Oct 2022
Product Liability in the Era of New and Emerging Technology: Changes on the Horizon
Product Liability in the Era of New and Emerging Technology: Changes on the Horizon
Partner
Mary Cooney
News
13
Oct 2022
Access Requests: Regulators Elevate the Threshold of Compliance
Partner
John O’Connor
Article and Insights
21
Nov 2018
Data Protection Could Be a Second Bite at the Apple for EU Competition Regulators
Apple's acquisition of Shazam initially sparked competition concerns but during th...
Partner
Leo Moore
Previous prev
next Next
See all