Data Privacy & Digital Rights
Ireland operates under GDPR + Data Protection Act 2018. Data Protection Commission (DPC) enforces. NCII is criminal under the Harassment, Harmful Communications and Related Offences Act 2020 (Coco's Law); investigation by An Garda Síochána.
Covered in this guide:
Ireland's data-protection framework is the EU General Data Protection Regulation (GDPR) as supplemented by the Data Protection Act 2018. The regulator is the Data Protection Commission (DPC) at dataprotection.ie — one of the most active GDPR regulators in the EU due to the concentration of US tech multinationals headquartered in Dublin.
For non-consensual intimate imagery (NCII), Ireland enacted the Harassment, Harmful Communications and Related Offences Act 2020 ("Coco's Law") in February 2021. Section 2 criminalises distribution / publication / threats to distribute intimate images without consent — up to 7 years' imprisonment. Section 3 (lesser offence — without intent to cause harm) carries up to 12 months' summary conviction. Investigation runs through An Garda Síochána, typically the GNCCB or local Garda. Victims should also use StopNCII.org (18+) or takeitdown.ncmec.org (under-18s) — both free.
Key Laws
EU General Data Protection Regulation (GDPR) + Data Protection Act 2018
Regulation (EU) 2016/679; Act 7 of 2018
Ireland's primary data-protection framework. Data-subject rights (access, rectification, erasure, restriction, portability, objection, automated-decision objection). Regulator: Data Protection Commission (DPC).
Harassment, Harmful Communications and Related Offences Act 2020 ("Coco's Law")
Act 32 of 2020 — commenced February 2021
Criminalises non-consensual distribution of intimate images (Section 2 — up to 7 years; Section 3 — up to 12 months summary). Also covers harassment by digital means and offensive online communications. Investigated by An Garda Síochána.
ePrivacy Regulations 2011
S.I. 336/2011
Implements EU ePrivacy Directive in Ireland. Covers electronic marketing, cookies, location data, and confidentiality of communications. Enforced by the DPC.
Removing Non-Consensual Intimate Imagery (NCII)
NCII in Ireland is criminal under Coco's Law (Harassment, Harmful Communications and Related Offences Act 2020). Section 2 criminalises distributing, publishing, or threatening to distribute intimate...
Your Rights Under GDPR and the Data Protection Act 2018
Ireland operates under the EU General Data Protection Regulation (GDPR) as supplemented by the Data Protection Act 2018. Data-subject rights: access (Article 15), rectification (16), erasure / right t...
Cyberstalking and Online Harassment Under Coco's Law
Cyberstalking and online harassment in Ireland are criminal under Coco's Law (Harassment, Harmful Communications and Related Offences Act 2020). Section 4 covers the offence of distributing or publish...