Éire · Data Protection Act 2018
TL;DR
Websites targeting users in Ireland must comply with GDPR as implemented locally through the Data Protection Act 2018. The supervisory authority is the Data Protection Commission (DPC). Notable enforcement: Meta (Instagram) fined for children's data handling (€405 million). Use our free scanner below to check your website instantly.
Free audit — 25+ automated checks in 60 seconds
Scan My Website Free →Authority
Data Protection Commission (DPC)
Website
www.dataprotection.ie ↗Local Law
Data Protection Act 2018
Language
English
Largest Fine
€405 million
Population
5.1 million
Lead supervisory authority for most Big Tech companies (Google, Meta, Apple, TikTok)
Cookie consent must be prior, informed, and specific
Strong enforcement on children's data protection
DPO required per standard GDPR criteria
Data breach notifications within 72 hours
Cross-border processing coordination with other EU DPAs
Ireland's DPC is the lead supervisory authority for most major tech companies headquartered in the EU. They have issued record fines including €1.2 billion to Meta for US data transfers — the largest GDPR fine ever.
Cookie consent banner that requires opt-in before non-essential cookies
Privacy policy available in English
Clear identification of data controller and contact details
Data Processing Agreement (DPA) with all third-party processors
Lawful basis documented for each processing activity
Data Subject Access Request (DSAR) process in place
Data breach notification procedure compliant with 72-hour rule
Data Protection Impact Assessment for high-risk processing
International data transfer mechanisms documented (SCCs, adequacy decisions)
Records of processing activities (ROPA) maintained
In Ireland, websites must comply with GDPR as implemented by the Data Protection Act 2018. Key requirements include obtaining explicit consent before setting non-essential cookies, providing a clear privacy policy, appointing a DPO when required, and notifying data breaches within 72 hours to the Data Protection Commission (DPC).
The Data Protection Commission (DPC) is the supervisory authority responsible for enforcing data protection laws in Ireland. They can investigate complaints, conduct audits, and issue fines up to €20 million or 4% of annual global turnover.
Use PrivacyChecker's free scanner to perform an instant audit of your website. Our tool checks 25+ compliance points including cookie consent, privacy policy presence, security headers, tracker detection, and more — all relevant to Ireland's GDPR requirements.
Find out in 60 seconds with our free GDPR scanner
Run Free Audit →