General Scheme of the Regulation of Artificial Intelligence Bill introduced

This document outlines the heads of the General Scheme of the Regulation of Artificial Intelligence Bill 2026.

Primary legal sourceLegislativeOfficial source · enterprise.gov.ie ↗

17 FEB 2026 · Other

Data Protection Commission investigates X over alleged generation and publication of non-consensual sexualised images by Grok AI

The Data Protection Commission (DPC) has today announced that it has opened an inquiry into X Internet Unlimited Company (XIUC) under section 110 of the Data Protection Act 2018.

Official materialGenerative AI ·Data Privacy & Protection ·Online Safety & Child ProtectionOfficial source · dataprotection.ie ↗

27 JAN 2026 · Law / Act

Harassment, Harmful Communications and Related Offences (Amendment) Bill 2026 introduced

Bill entitled an Act to amend the Harassment, Harmful Communications and Related Offences Bill 2020 to prohibit the creation of non-consensual intimate or harmful imagery; and to increase the timeframe under which summary proceedings for an offence may be instituted.

Primary legal sourceDeepfakes ·Generative AI ·Online Safety & Child ProtectionOfficial source · oireachtas.ie ↗

22 JAN 2026 · Law / Act

Online Safety (Recommender Algorithms) Bill 2026

On 22 January 2026, the Online Safety (Recommender Algorithms) Bill 2026 (Bill No. 7 of 2026) including recommender algorithm regulation was introduced to the lower house of Parliament. The Bill seeks to amend the Online Safety and Media Regulation Act 2022 to restrict the use of recommender systems by video-sharing platform services operating in Ireland. The Bill would prohibit video-sharing platform services from deploying recommender systems where the service provider is aware that the rec...

Primary legal sourceNational StrategyOfficial source · oireachtas.ie ↗

16 DEC 2025 · Working Paper

Parliament Joint Committee inquiry into Artificial Intelligence

On 16 December 2025, the parliamentary Joint Committee on Artificial Intelligence published its first interim report, which includes 85 recommendations. The Joint Committee's recommendations cover measures to institutionalise AI governing bodies, including establishing the Joint Committee itself on a permanent basis, ensuring the full independence of the national AI Office, developing a national AI register, permanently establishing the AI Advisory Council, and founding an AI Observatory. The...

Official materialNational StrategyOfficial source · data.oireachtas.ie ↗

16 DEC 2025 · Other

Irish parliamentary committee on AI publishes first interim report with 85 recommendations

The Joint Committee on Artificial Intelligence today published its First Interim Report. The Committee was formed to examine and make recommendations on Ireland’s approach to the development, deployment, regulation, and ethical considerations of artificial intelligence (AI), and on the means of ensuring that the approach supports economic growth, innovation, public trust, and societal benefit while safeguarding rights and mitigating risks.

Official materialOnline Safety & Child Protection ·Data Privacy & ProtectionOfficial source · oireachtas.ie ↗

11 DEC 2025 · Law / Act

Coimisiun na Mean investigation into X over alleged non-compliance with Article 20 of the EU Digital Services Act

On 12 November 2025, the Coimisiún na Meán (Media Commission) opened a formal investigation into the provider of the X online platform (X) under the EU Digital Services Act (DSA) to assess possible contravention of Article 20, based on concerns from its Platform Supervision Team supported by information from HateAid and a user complaint. The investigation will examine whether people can appeal X’s decisions not to remove content reported for potential breach of terms of service, whether peopl...

Primary legal sourceContent ModerationOfficial source · cnam.ie ↗

04 NOV 2025 · Other

Irish Data Protection Commission source on Grok-related data-protection oversight

Official source record dated 11 April 2025 for Ireland concerning Irish Data Protection Commission investigates Grok AI. See the linked dataprotection.ie source for the authoritative text, procedural context, and implementation details.

Official materialData Privacy & Protection ·Generative AIOfficial source · dataprotection.ie ↗

02 NOV 2025 · Standard / Framework

CNIL source on AI and data protection

Official source record dated 11 February 2025 for Ireland concerning Global data protection authorities sign joint declaration on building trustworthy data governance frameworks to encourage development of innovative and privacy-protective AI. See the linked cnil.fr source for the authoritative text, procedural context, and implementation details.

Official materialData Privacy & Protection ·CybersecurityOfficial source · cnil.fr ↗

24 SEP 2025 · Other

Polish Data Protection Commissioner and Ireland Data Protection Commission's collaboration to combat deepfake fraud in online platforms

On 24 September 2025, the Polish Data Protection Commissioner (UODO) issued a statement on the cooperation with the Irish Data Protection Commission on enhancing personal data protection in social media platforms. The statement highlighted engagement with social media platforms to increase protection against false advertising, particularly scams that misuse images of public figures or users, often with deepfake technology, to extort personal data or money. The authorities encouraged social me...

Official materialNational StrategyOfficial source · uodo.gov.pl ↗

17 SEP 2025 · Standard / Framework

Data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI

Primary source (pcpd.org.hk) dated 17 September 2025 in IE. See linked source for full text.

Official materialData Privacy & Protection ·Sandbox ·Generative AIOfficial source · pcpd.org.hk ↗

16 SEP 2025 · Executive Order

Government order on designation of National Competent Authorities under European Union Artificial Intelligence Act (EU AI Act)

On 16 September 2025, Ireland designated additional authorities under the European Union Artificial Intelligence Act (EU AI Act) to bring the total number of designated National Competent Authorities to 15. These included the Media Commission, the Commission for Regulation of Utilities, the Health Service Executive, the Minister for Enterprise, Tourism and Employment, the Minister for Transport, the National Transport Authority, and the Workplace Relations Commission. A national Single Point ...

Primary legal sourceNational StrategyOfficial source · enterprise.gov.ie ↗

16 SEP 2025 · Law / Act

Ireland designates national competent authorities under EU AI Act and confirms new national AI office

Ireland has taken a major leap forward in the rollout of the EU Artificial Intelligence (AI) Act, becoming one of the first six Member States to reach the critical milestone of designating the competent authorities which will be responsible for enforcement of the Act.

Primary legal sourceSandboxOfficial source · enterprise.gov.ie ↗

11 JUL 2025 · Other

DPC statement on LinkedIn AI training

The DPC has been engaging consistently with many of the companies at the forefront of AI development, with a focus on ensuring the responsible development and deployment of the technology for users across the EU/EEA

Official materialData Privacy & Protection ·Generative AI ·Online Safety & Child ProtectionOfficial source · dataprotection.ie ↗

10 JUL 2025 · Other

Data Protection Commission investigation into TikTok's transfer of personal data of users in European Economic Area to servers in China

On 10 July 2025, Ireland’s Data Protection Commission (DPC) announced the launch of an investigation into TikTok's transfers of European Economic Area (EEA) users’ personal data to servers located in China. The investigation applies to TikTok’s processing and transfer of EEA users’ personal data. The investigation followed TikTok’s admission that limited EEA user data had been stored in China contrary to assurances in DPA's previous inquiry that EEA user data were stored on servers located ou...

Official materialNational StrategyOfficial source · dataprotection.ie ↗

24 JUN 2025 · Policy / Guidance

National Cyber Security Centre NIS2 Risk Management Measures Guidance

On 24 June 2025, the National Cyber Security Centre (NCSC) of Ireland published the NIS 2 Risk Management Measures (RMMs) draft guidance. The measures derive from the National Cybersecurity Bill, giving effect to the NIS 2 Directive. The guidelines apply to a variety of providers, registries, platforms, and services, termed “essential and important entities”. Under the guidelines, organisations must register with the NCSC, receive oversight from their individual management boards for accounta...

Official materialNational StrategyOfficial source · ncsc.gov.ie ↗

17 JUN 2025 · Law / Act

Media Commission investigation into X's compliance with Online Safety Code age verification requirements

On 17 June 2025, the Media Commission issued a statutory Information Notice to X Internet Unlimited Company under Section 139O of the Broadcasting Act. The notice compels X to provide information regarding its compliance with the Online Safety Code because the information provided by X so far was not sufficient to assess whether X’s current measures are sufficient to protect children using the service. X is obliged to respond by 22 July 2025. Failure to comply with the Notice can result in cr...

Primary legal sourceConsumer ProtectionOfficial source · cnam.ie ↗

21 MAY 2025 · Other

Ireland DPC issues statement about Meta AI

Over the past two years, the Data Protection Commission (DPC) has been engaging intensively with many of the leading technology companies at the forefront of AI developments in particular concerning the use of adult's personal data to train Large Language Models in the EU/EEA. Whilst acknowledging that aspects of the application of GDPR to this fast changing technology remains complex, through our regulatory engagement the DPC has ensured that companies understand what is required in order to reduce high risks and harms to individuals. This has resulted in a number of companies implementing im

Official materialData Privacy & Protection ·Generative AIOfficial source · dataprotection.ie ↗

11 APR 2025 · Law / Act

Data Protection Commission investigation into X's data processing practices for training generative AI model Grok compliance with GDPR

Official source record dated 4 November 2025 for Ireland concerning Data Protection Commission investigation into X's data processing practices for training generative AI model Grok compliance with GDPR. See the linked dataprotection.ie source for the authoritative text, procedural context, and implementation details.

Primary legal sourceNational StrategyOfficial source · dataprotection.ie ↗

21 FEB 2025 · Policy / Guidance

Ireland’s AI Advisory Council releases report to government on shaping Ireland's AI future

The AI Advisory Council today 21 February announced the release of its latest report, ' Ireland’s AI Advisory Council Recommendations – Helping to Shape Ireland’s AI Future (February 2025) '. This comprehensive report outlines key opportunities and strategic policy recommendations aimed at accelerating AI adoption in Ireland while safeguarding the nation’s economy, competitiveness, workforce and society.

Official materialDeepfakes ·Data Privacy & ProtectionOfficial source · enterprise.gov.ie ↗

12 FEB 2025 · Law / Act

Media Commission investigation into TikTok over alleged non-compliance with EU Digital Services Act obligations

On 2 December 2025, the Media Commission opened an investigation into TikTok under the EU Digital Services Act (DSA), pursuant to Part 8B of the Broadcasting Act 2009, as amended. The investigation followed a September 2024 review by the Platform Supervision Division on compliance with Article 16 DSA concerning “notice and action” mechanisms. The Media Commission identified concerns that TikTok’s illegal content reporting mechanisms may include potential “dark patterns” liable to confuse peop...

Primary legal sourceContent ModerationOfficial source · cnam.ie ↗

17 DEC 2024 · Law / Act

Data Protection Commission investigation into Meta over alleged non-compliance with security requirements under GDPR

On 17 December 2024, the Irish Data Protection Commission (DPC) concluded its investigation into Meta by issuing final decisions related to a data breach reported in September 2018. This breach affected approximately 29 million Facebook accounts globally, including around 3 million within the EU/EEA, exposing sensitive personal data. The DPC's investigation found Meta in violation of several General Data Protection Regulation (GDPR) provisions, notably in failing to include all required infor...

Primary legal sourceNational StrategyOfficial source · dataprotection.ie ↗

09 DEC 2024 · Law / Act

Irish Data Protection Commission investigation into Google AI model for alleged violations of GDPR data protection impact assessment

On 12 September 2024, the Irish Data Protection Commission (DPC) announced that they launched a statutory cross-border investigation into Google Ireland Limited under Section 110 of the Data Protection Act 2018. In particular, the DPC will investigate whether Google complied with its obligations to conduct a Data Protection Impact Assessment (DPIA), as required under Article 35 of the General Data Protection Regulation (GDPR), before processing personal data of EU/EEA individuals in developin...

Primary legal sourceNational StrategyOfficial source · dataprotection.ie ↗

09 DEC 2024 · Other

Ireland Data Protection Commission launches investigation into Google Ireland over AI model

The Data Protection Commission (DPC) today announced that it has commenced a Cross-Border [1] statutory inquiry into Google Ireland Limited (Google) under Section 110 of the Data Protection Act 2018. The statutory inquiry concerns the question of whether Google has complied with any obligations that it may have had to undertake an assessment, pursuant to Article 35 [2] of the General Data Protection Regulation (Data Protection Impact Assessment), prior to engaging in the processing of the personal data of EU/EEA data subjects associated with the development of its foundational AI model, Pathwa

Official materialData Privacy & Protection ·Generative AIOfficial source · dataprotection.ie ↗

09 DEC 2024 · Law / Act

CNAM investigation into online platform compliance with EU Digital Services Act

On 12 September 2024, Ireland's media regulator (CNAM) initiated an investigation into the compliance of online platforms in Ireland with their obligations under the Digital Services Act (DSA). The DSA mandates that platforms offer accessible, user-friendly reporting systems and maintain clear contact points for users. CNAM has requested detailed information from TikTok, X, YouTube, Meta, LinkedIn, Temu, Pinterest, Shein, Etsy, Dropbox, Hostelworld, and Tumblr. After reviewing the responses,...

Primary legal sourceContent ModerationOfficial source · cnam.ie ↗

31 OCT 2024 · Executive Order

Minister of State for Trade Promotion order on designation of authorities for protecting fundamental rights under the EU Artificial Intelligence Act

On 31 October 2024, the Minister of State for Trade Promotion, Digital and Company Regulation announced a list of nine national public authorities responsible for protecting fundamental rights through regulations provided in the EU Artificial Intelligence (AI) Act. These authorities will receive additional powers under the AI Act, enabling them to protect fundamental rights in cases where the use of AI may endanger those rights. The authorities will have the power to access documentation that...

Primary legal sourceNational StrategyOfficial source · enterprise.gov.ie ↗

31 OCT 2024 · Law / Act

Digital Minister announces key milestone in the implementation of the EU regulation on AI

Minister of State for Trade Promotion, Digital and Company Regulation, Dara Calleary TD, today published a list of nine national public authorities responsible for protecting fundamental rights under the EU Artificial Intelligence (AI) Act.

Primary legal sourceData Privacy & Protection ·Online Safety & Child ProtectionOfficial source · enterprise.gov.ie ↗

04 OCT 2024 · Law / Act

DPC investigation into Ryanair for alleged non-compliance with GDPR in facial recognition verification process

On 4 October 2024, the Data Protection Commission of Ireland announced an investigation against Ryanair for non-compliance with the General Data Protection Regulation (GDPR) in the facial recognition verification process. The investigation focuses on Ryanair's handling of personal data related to its customer verification processes for customers booking flights through third-party websites, amid complaints regarding the requirement for additional identity verification that may involve facial ...

Primary legal sourceNational StrategyOfficial source · dataprotection.ie ↗

27 SEP 2024 · Other

Irish Data Protection Commisssion investigation into Meta for storing social media passwords without cryptographic protection or encryption

On 27 September 2024, the Irish Data Protection Commission (DPC) announced its decision to fine Meta with EUR 91 million for storing passwords of social media users without cryptographic protection or encryption (in “plaintext”) on its internal systems. The decision follows an inquiry launched in April 2019 to assess Meta’s compliance with the GDPR’s obligations. In particular, the DPC has found that Meta failed to comply with its obligations to notify the DPC of a personal data breach concer...

Official materialNational StrategyOfficial source · dataprotection.ie ↗

03 SEP 2024 · Court Case

DPC lawsuit against Supermac's Ireland Limited for allegedly sending unsolicited marketing emails

On 3 September 2024, the Court of Galway issued a ruling in a case involving Supermac’s Ireland Limited regarding unsolicited marketing emails. Supermac's Ireland Limited pled guilty to sending unsolicited marketing emails to five charges of sending unsolicited marketing emails. This ruling followed a warning issued by the Data Protection Commission (DPC) in February 2023 after investigating complaints against the company. Instead of a conviction, Supermac's Ireland Limited was directed to do...

Court recordNational StrategyOfficial source · dataprotection.ie ↗

18 JUL 2024 · Policy / Guidance

Data Protection Commission guidance on AI, Large Language Models and Data Protection and risks to the organisation using AI systems

On 18 July 2024, the Data Protection Commission (DPC) issued a guidance specifically addressing the use of Artificial Intelligence (AI), including Large Language Models (LLMs) and their implications for data protection. The guidance is addressed to organisations employing AI systems, highlighting the potential risks associated with personal data processing within these technologies. It underscores the importance of compliance with the General Data Protection Regulation (GDPR), emphasising the...

Official materialNational StrategyOfficial source · dataprotection.ie ↗

18 JUL 2024 · Policy / Guidance

Ireland DPA releases guidance on data protection and AI

In recent years, Artificial Intelligence (AI) and, particularly, chatbots based on Generative AI (Gen-AI) have become popular products on the internet and are often freely available to the public. Generally, these chatbot systems are able to respond to input questions or tasks accurately because they use an underlying model that have been through a process of training, often based on many large datasets, sometimes including data that are publicly accessible on the internet.

Official materialData Privacy & Protection ·Cybersecurity ·Generative AIOfficial source · dataprotection.ie ↗

27 MAY 2024 · International Agreement

Internet regulators release joint statement to sync content bans and oversight schemes

Primary source (esafety.gov.au) dated 27 May 2024 in IE. See linked source for full text.

Primary legal sourceOnline Safety & Child Protection ·DeepfakesOfficial source · esafety.gov.au ↗

09 MAY 2024 · Court Case

Ireland's data regulator ends court proceedings against X

The DPC is pleased to announce the conclusion of the proceedings it brought before the Irish High Court on 8 August 2024. The matter was back before the Court this morning and the proceedings have been struck-out on the basis of X’s agreement to continue to adhere to the terms of the undertaking ( DPC statement issued on 8 August 2024 ) on a permanent basis.

Court recordData Privacy & Protection ·Generative AIOfficial source · dataprotection.ie ↗

09 JAN 2024 · Executive Order

Commission for Communication order on designation of video-sharing platform services as a category of relevant online services under the Broadcasting Act 2009

On 9 January 2024, the Commission for Communication of Ireland designated 10 video-sharing platform service providers, which will be subject to the Online Safety Code, currently under consultation. The designated platforms include Facebook, Instagram, LinkedIn, Pinterest, Reddit, Tumblr, X (formerly Twitter), TikTok, Udemy, and YouTube. The code implements Article 28b of the European Union (EU) Audiovisual Media Services Directive, Digital Services Act and the Terrorist Content Online Regula...

Primary legal sourceContent ModerationOfficial source · cnam.ie ↗

10 OCT 2023 · Law / Act

Data Protection Commission investigation into TikTok over alleged violations of GDPR concerning processing of children's data

On 10 October 2023, TikTok filed an appeal against the fine and compliance order issued by the Irish Data Protection Commission (DPC) Commission based on the European Data Protection Board (EDPB) binding decision. On 15 September 2023, the DPC imposed a EUR 345 million fine on Tiktok over General Data Protection Regulation (GDPR) violations and issued an order requiring the company to change its children's data processing practices to ensure compliance with the laws within 3 months. During it...

Primary legal sourceNational StrategyOfficial source · eur-lex.europa.eu ↗

20 JUN 2023 · Other

Local content requirement in Coimisiún na Meán (CNM) 2023 work programme

On 20 June 2023, the Commission for regulating broadcasters and online media and supporting media development of Ireland (Irish Coimisiún na Meán/CNM) published its 2023 work programme, including policies to support the production of content in Irish, promote media literacy, as well as equality, diversity and inclusion. In particular, the CNM stated that it aims to support the development of content that reflects Irish society and plans to review Irish language services, explore cross-border ...

Official materialContent ModerationOfficial source · cnam.ie ↗

26 APR 2023 · Law / Act

Criminal Justice (Incitement to Violence or Hatred and Hate Offences) Bill 2022

On 26 April 2023, the Criminal Justice (Incitement to Violence or Hatred and Hate Offences) Bill 2022 was passed by the Dáil Éireann. The Bill amends the hate speech laws, foreseeing criminal liability for people found guilty of preparing, possessing or disseminating materials inciting violence or hatred against people on account of their protected characteristics, as well as denial or condonation of genocide. The Bill grants law enforcement with implementation powers including device search ...

Primary legal sourceContent ModerationOfficial source · oireachtas.ie ↗

19 APR 2023 · Policy / Guidance

Irish Data Protection Commission Guidance on Records of Processing Activities (RoPA)

On 19 April 2023, the Irish Data Protection Commission published a Guidance Note entitled “Records of Processing Activities (RoPA) under Article 30 GDPR”. The Guidance outlines how to comply with the requirement set in Article 30 of the GDPR concerning the obligation of data controllers and processors to maintain a detailed record identifying the activities the organisation carries out using personal data. More specifically, the Guidance lists the “Do’s and Don’ts” for data controllers and pr...

Official materialNational StrategyOfficial source · dataprotection.ie ↗

27 FEB 2023 · Law / Act

Data Protection Commission investigation into Bank of Ireland compliance with GDPR and the Data Protection Act 2018

On 27 February 2023, the Data Protection Commission (DPC) announced a ruling in its investigation into the Bank of Ireland (BOI) over alleged data breach concerns when using their Banking365 application. The investigation intended to establish whether the BOI ignored its responsibilities and whether any articles of the Data Protection Act 2018 and/or the General Data Protection Regulation (GDPR) were violated in connection to a number of personal data breaches. The data breaches allowed indiv...

Primary legal sourceNational StrategyOfficial source · dataprotection.ie ↗