What Ireland Data Protection Act 2018 - GDPR National Implementation and Lead EU DPA for Big Tech requires
Ireland's Data Protection Act 2018 (Acts of the Oireachtas 2018, No. 7), signed into law on 24 May 2018, is Ireland's primary national legislation supplementing the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) in Ireland. The GDPR is directly applicable Irish law by virtue of Ireland's EU membership. The Data Protection Act 2018 repeals the prior Data Protection Acts 1988 and 2003 and provides national derogations, additions, and specifications for the Irish GDPR implementation. Enforcement: Data Protection Commission (DPC) is Ireland's independent data protection supervisory authority, headed by a commissioner appointed by Government. The DPC is of critical strategic importance beyond Ireland's borders because Ireland is the EU headquarters location for many of the world's largest technology companies. Under the GDPR one-stop-shop mechanism, the DPC acts as the lead supervisory authority (LSA) for cross-border personal data processing by organisations with their EU main establishment in Ireland - this includes Meta Platforms (Facebook, Instagram, WhatsApp), Google, Apple, Microsoft, LinkedIn, Twitter/X, TikTok, Airbnb, and numerous other global technology companies. Accordingly, the DPC handles major cross-border GDPR complaints from data subjects across all 27 EU member states against these companies, making it one of the most consequential data protection authorities in the world. The DPC has issued the largest GDPR fines in EU history: Meta Ireland (EUR 1.2 billion, May 2023 - for EU-US data transfers without adequate safeguards, the largest GDPR fine ever issued), Instagram/Meta (EUR 405 million, September 2022 - children's data handling), WhatsApp Ireland (EUR 225 million, September 2021 - transparency), and Meta Ireland (EUR 265 million, November 2022 - data scraping). Key Irish national provisions: (1) Age of digital consent: Ireland has maintained the GDPR default of 16 years for information society services; (2) Journalistic privilege - specific exemptions for journalistic, research, statistical, and historical processing; (3) Employment context - specific national provisions on employee data processing interacting with Irish employment law including the Workplace Relations Act 2015; (4) Public access to information - the Freedom of Information Act 2014 interacts with GDPR in the Irish public sector context; (5) Health research - the Health Research Regulations 2018 provide a specific consent-based framework for health research in Ireland. Fines: GDPR administrative fines apply - up to EUR 20 million or 4% of global annual turnover, and the DPC has demonstrated willingness to apply maximum fines to global technology companies.
Pillar: Data Protection & Privacy · Authority: Data Protection Commission (DPC, Ireland) · Version: 1.0.0 · Last updated:
Primary source: https://www.dataprotection.ie/
SHA-256 integrity: d56c71d850bd864273e5169210900d4750f52c4e6a79e40f1ea9b6055cd11a50
Primary Citations — 6 traced to source
- Data Protection Act 2018 (No. 7 of 2018, Ireland) - signed 24 May 2018; repeals Data Protection Acts 1988 and 2003; supplements EU GDPR; national derogations: age of digital consent 16 years (GDPR default maintained); journalistic, research, statistical, and historical processing exemptions; Health Research Regulations 2018 framework; DPC as lead supervisory authority for organisations with EU main establishment in Ireland
- EU GDPR (Regulation (EU) 2016/679) - directly applicable in Ireland; DPC as lead supervisory authority (LSA) for cross-border processing by Ireland-established entities including Meta, Google, Apple, Microsoft, LinkedIn, Twitter/X, TikTok; record GDPR fines: Meta Ireland EUR 1.2 billion (May 2023, EU-US transfers), Instagram/Meta EUR 405 million (September 2022, children's data), WhatsApp Ireland EUR 225 million (September 2021, transparency), Meta Ireland EUR 265 million (November 2022, data scraping)
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/ie-data-protection-act-2018.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/ie-data-protection-act-2018.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/ie-data-protection-act-2018
- Back to registry: Browse all 10,090 compliance nodes