Our Privacy and Data Protection team is a multi-disciplinary group comprising experts from our practice areas of Corporate, Dispute Resolution, Employment, Pensions & Immigration and Intellectual Property.
We offer practical advice supporting corporate client’s in all aspects of data privacy from managing data privacy and security to responding to data breaches, the threat of litigation and regulatory investigation. With the introduction of the General Data Protection Regulation on 25 May 2018, and the obligation on organisations to demonstrate compliance, we provide practical and cost-effective advice on the review of existing practices and implementation of data privacy by design.
Our services include:
- Data protection compliance advice for data processors and data controllers
- Drafting data protection and privacy policies
- Drafting data retention policies
- Assisting in privacy impact assessments
- Reviewing third party contracts and advising on the risk
- Drafting data breach policies
- Advising on managing data breaches
- Assessing the impact of data protection on direct marketing
- Addressing how to deal with data subjects’ access requests and exemptions
- Advice regarding the processing of employee-related data
- Advising on data misuse by employees
- Training and information sessions for managers and employees
Our clients include professional bodies, pharmaceutical companies, IT companies, financial institutions, motor companies and manufacturing companies.
Recent Data Protection Work
- Advised online marketplace in relation to website privacy policy, obtaining consents to processing personal data and data retention policy
- Advised data processor in relation to a breach of personal data, including notifications to the Data Protection Commissioner’s Office and implementing a data breach policy
- Advised and reviewed, on behalf of a number of corporate clients, their responses to subject access requests including litigation related requests
- Advised financial institution in relation to review of HR policies to ensure compliance with GDPR and compliance with Central Bank regulations
- Advised employee in High Court action in relation to privacy and data protection rights in the case of employer monitoring