Flynn O’Driscoll’s data protection team provides specialist advice to a broad range of clients on all aspects of privacy and data protection regulation and compliance. This includes advising on GDPR compliance requirements, records of processing activities, data processing policies and agreements, international data transfers and related compliance and contractual requirements. We also advise on and assist in responding to data subject requests, domestic and cross-border personal data breaches, incident response procedures, reporting and notification requirements, communications and dealings with the affected data subjects and with the supervisory authority.
Experience
We advise on all facets of privacy and data protection regulation and compliance. Our data protection team’s client base spans across all sectors and includes world leading manufacturers of electric vehicles and other connected devices, software development and software service companies, online marketplaces or other online platform operators and digital service providers, cutting edge medical device and e-health technology companies, medical clinics, fintech, insurance and recruitment companies, food producers, publishers, educational and research institutions and spinouts from local universities.
Our key services in this sector include:
- Advising in relation to the conduct of data protection impact assessments for new technologies or processing activities
- Privacy by design at the early or development stages of new technologies or platforms
- Drafting and advising in relation to the implementation of various policies and procedures, including:
- Cookie Policies
- Privacy Policies
- Data Retention Policies
- Group Data Protection Policies
- Employee Data Protection and Security Policies
- Breach Reporting Procedures and Incident Response Plans
- Data subject rights and responses to data subject access requests or any other request made by a data subject
- Security incidents and personal data breaches, including assessments of risk, and breach notifications to the Data Protection Commission and, where required, to the affected data subjects
- Responding to queries and advising on specific areas of privacy and data protection legislation
- Freedom of Information requests, responses and appeals
Recent
- Leading global manufacturer of electronic vehicles on all aspects of privacy and data protection compliance requirements from an Irish law viewpoint, including advising on policy documents and legal agreements
- Advising on GDPR requirements for companies expanding into Europe
- Drafting and advising a global retailer on a suite of documents to ensure data protection compliance
- Assisted with and advised on the response to and resolution of a client’s personal data breach, including timely notification to the Data Protection Commission and in communications with the affected data subjects
- Privacy and data protection requirements in relation to the design and implementation of an eCommerce platform, including merchant of record and data sharing considerations
- Responses to data subject access requests, including requests involving personal data related to children
