The data protection practice at A&L Goodbody LLP is a 'go-to firm in Ireland for all matters relating to cyber security and data privacy'; it frequently handles mandates surrounding regulatory compliance, data breaches, and cyber security incidents. The practice is headed by privacy and data protection expert John Cahir, who is lauded as 'excellent and extremely authoritative' and is well-versed in handling domestic and cross-border projects. John Whelan has considerable experience advising on compliance and regulatory disputes connected to data privacy and protection. 'Go-to counsel' Chris Bollard also plays a key role in advising clients active in the technology sector on privacy and AI mandates, and Andrew Sheridan is a key contact for data privacy crises and investigations.

Arthur Cox is well equipped to handle a vast range of matters, including data protection, data transfers, and cyber security mandates in the energy, entertainment, technology, and telecoms sectors, and its work often includes cross-border GDPR compliance projects. Advising the top data controllers with EU establishments in Ireland, the firm handles matters covering data privacy compliance, data security, digital regulation, cyber security attacks, transfer of personal data, and GDPR breaches. Colin Rooney helms the team and focuses largely on regulatory dealings and negotiations. Rob Corbet is renowned as a ‘go-to’ for AI governance, while Olivia Mullooly has expertise in data breaches and Ian Duffy has extensive experience in international data transfer strategies.

Mason Hayes & Curran LLP maintains its strong reputation as a powerhouse in data privacy and protection for its international blue-chip and next generation technology clients. Notably, the firm acted for Meta in significant international data transfer proceedings, guided by practice head Philip Nolan, who is prominent for handling GDPR compliance projects. Oisín Tobin specialises in privacy by design structures and Robert McDonagh assists with the implementation of transfer and digital compliance programmes. Jevan Neilan helps clients navigate global data breaches and EU technology regulation and investigations.

Matheson LLP’s cross-departmental data protection group assists clients like Microsoft with the full range of matters, including data protection compliance, data transfer agreements, cyber-attacks, cyber security and GDPR compliance. Practice lead Anne-Marie Bohan is particularly well-versed in handling matters at the interface between privacy rules and the requirements of financial services regulation. Michael Byrne advises internet service providers on take-down requests, regularly working on the contentious side of the practice. Deirdre Crowley specialises in advising multinational and enterprise clients on regulatory enquiries. Rory O’Keeffe left the firm in May 2024 while Sarah Jayne Hanna joined the team in 2024.

The team at McCann FitzGerald LLP is adept at handling a large breadth of matters, including those surrounding cyber security, international data transfers, and GDPR compliance, as well as the processing and sharing of data. Alongside advising private sector multinational and local entities in the technology, financial services, and pharmaceutical industries, the group also provides public sector bodies with advice on standalone matters and on large-scale personal data projects in Ireland. Adam Finlay, who oversees the team, and 'first-class data privacy practitioner' Paul Lavery both act as EU GDPR representatives for non-EU companies; Lavery is a specialist in data protection compliance and data transfers outside of the EEA. Doug McMahon is another integral part of the team, working on both contentious and non-contentious matters.

LK Shields Solicitors LLP and Byrne Wallace LLP merged at the beginning of 2025 to form Byrne Wallace Shields, with the newly formed team offering experience across the spectrum of privacy and data protection matters. The team provides ‘comprehensive’ advice, with a cross-departmental bench of specialists covering the complete data protection compliance lifecycle, from pre-incident advice, to legislative and regulatory compliance and data breach response. Overseeing the team, Seán O’Donnell focuses on data security and cybersecurity breaches, regulatory investigations, and infringement claims. Zelda Deasy’s practice centres on general data protection work, drafting, reviewing and negotiating data transfer agreements as well as online terms and conditions, data protection policies and privacy and cookies policies. Jane O’Grady has in-depth knowledge of privacy issues in the healthcare and financial services sectors and regularly advises on data protection and cybersecurity aspects of large-scale IT projects.

Clients in the insurance and finance sectors rely on DAC Beachcroft Dublin for its expertise in data privacy policies, cyber-attacks, GDPR compliance, and data sharing, breaches, and collection processes. The firm is well-versed in marrying its technical knowledge of data protection law with its robust understanding of the insurance distribution chain and financial regulations. The team co-heads are Rowena McCormack, who is experienced in security breaches, and Aidan Healy, who has taken the lead on assisting with AI-related matters.

DLA Piper Ireland LLP is well known for handling a breadth of data privacy and protection matters, with skills in providing advice on data transfer compliance, cyber security breaches and data processing agreements. John Magee spearheads the team and has experience in advising on global data governance matters, as well as on information access requests and regulatory investigations on the contentious side. Conor McEneaney focuses on commercial advisory and transactional mandates, with both him and ‘expert’ Eilís McDonald regularly advising on strategic technology mandates in the financial services sector.

Operating on a global stage, Eversheds Sutherland has deep expertise in advising national and multinational clients on cross-border data transfers, data protection compliance, data security, freedom of information, data disclosure requests, and large-scale ransomware attacks. Appointed to the firm’s international head of technology this year, Marie McGinley heads up the practice and specialises in cybersecurity issues and outsourcing arrangements. Ellie Cater is well-versed in developing emerging technology in line with the privacy-by-design principle. Peter O’Neill left the firm in August 2024 while David Kirton joined the team in October 2024.

William Fry LLP is reputed for advising on the negotiation of data protection contracts, regulatory aspects, cyber incidents, data transfer, GDPR compliance, and direct marketing laws. Leading the team is Leo Moore, specialising in transactional matters, outsourcing, and the commercialisation of emerging technologies. David Cullen is well-versed in contracts covering the design, development, and implementation of IT projects. Both Rachel Hayes, who stands out for her deep insight into international personal data flows and breach management, and AI expert Barry Scannell, who regularly advises on the interface between automated decision making and profiling, were promoted to partner in May 2024.

Addleshaw Goddard advises multinational private clients, notably in the retail and telecoms sector, regulatory bodies, and public entities on a range of matters and is particularly adept in regulatory investigations by the Irish Data Protection Commission. Practice head David Hackett primarily advises on GDPR compliance, privacy, and freedom of information matters, while Jane Farren has substantial experience in regulatory investigations, data processing agreements, and transfers of data outside of the EEA.

Beauchamps LLP's data protection department demonstrates strengths in matters related to data sharing, freedom of information, database right infringement, and GDPR compliance, with a particular emphasis on the technology, financial, health, and retail sectors. Data processing outsource arrangements and international data transfers make up the bulk of co-head Damian Maloney's practice, while co-head Edward Evans has significant expertise advising software and technology clients.

Fieldfisher’s data protection team is heavily focused on compliance matters, with expertise in the data protection aspects of mergers and acquisitions. Ciara Burke, who joined the team in August 2023, heads the practice and is experienced with data sharing, processing, and transfer agreements.

The team at Hayes Solicitors LLP is proficient in advising clients on GDPR compliance and data transfer, processing, and security breaches. Under the leadership of Laura Fannin, who is reputed for handling both contentious and non-contentious issues, the team advises both private organisations and public bodies. Denise O’Shaughnessy is also highlighted for advising clients on best practice in the AI sector.

Pinsent Masons LLP's privacy department’s primary area of focus is financial service outsourcing work and data regulation matters. The firm is well-positioned to advise on matters related to data breaches, GDPR compliance, and freedom of information. Co-head Andreas Carney has over two decades of experience in both transactional and advisory data protection work; alongside Carney, Maureen Daly has extensive experience with regulatory bodies.

RDJ LLP is well-versed in the full spectrum of matters in relation to GDPR compliance and cybersecurity, particularly in data breaches, from investigation through to recovery. Ricky Kelly, head of the practice, has deep experience in managing the entire end-to-end investigations process, including the mitigation of cybersecurity issues.

Heavily active in non-contentious mandates, Walkers’s data privacy team has a strong fintech offering and largely focuses on regulatory risk and compliance matters. The team is led by Shane Martin, who is a regulatory expert and advises across the banking, funds, and payment services sectors.