Data Protection

The law governing data protection is regulated under the Data Protections Acts 1988-2003 in accordance with our obligations under the EU Data Protection Directive 95/46/EC. The proper implementation of data protection law places stringent requirements on data controllers and data processors to ensure that data (both manual and automated) is collected, processed, stored and secured correctly. It is vital that appropriate security measures are taken against unauthorised access, alteration, disclosure or destruction of the data held by the organisation. Breaches of these requirements have also attracted much media attention in Ireland and the UK particularly breaches regarding public bodies.

Data protection group

Our data protection group is skilled at handling all aspects of data protection law. We act on behalf of multiple public bodies, including the health authorities, healthcare providers, IT companies, banks and financial institutions. We know that data protection issues can sometimes have a significant media dimension to them. We understand that this places additional pressures on the organisation in question and our administrative law group is highly experienced in handling these complex situations with precision and tact.

Data protection services

We are skilled in all areas of data protection including:

• Advising on lost, stolen or otherwise compromised data
• Disclosure requests and exemptions
• The establishment of data security procedures and policies
• Outsourcing and the use of external data processors
• Dealing with freedom of information requests
• Data protection audits
• Compliance advice for data processors and controllers
• Exporting of data to countries outside of the EEA