Data for Sale: Can Insolvent Companies Realise the Value of Corporate Data?
Spirit Airlines' proposed US$10m data sale asks whether business data can be realised for creditors while remaining compliant.
Rachel specialises in privacy & data protection matters, and by extension, the ever-evolving areas of cybersecurity, AI, data and content regulation.
Rachel works closely with indigenous and multinational clients on all matters concerning data protection & privacy. Her extensive experience ranges from advising on global projects, complex data transfers, personal data breaches / cyber incidents & reputation management, regulatory investigations, individual complaints/rights requests, data subject claims/privacy litigation and general compliance matters. She is also focused on the growing video games industry within Ireland.
Rachel regularly speaks at events and provides training on her practice areas.
2026 Legal 500 EMEA
"Rachel Hayes is an exceptional lawyer. She provides advice which is practical, knowledgeable and professional in a prompt manner. She is one of the leading lawyers in Ireland at the intersection of law and technology, especially in the gaming space. Rachel is collaborative, approachable and unfailingly responsive, making her a trusted adviser on high-value and time-critical matters."
2025 Legal 500 EMEA
"Rachel Hayes is very smart, sharp and her ability to give relevant and business-focused advice is very valuable; her recent promotion to partner comes as no surprise." "Rather than simply restating the law, Leo Moore and Rachel Hayes focus on providing actionable solutions to compliance issues. They are diligent and conscientious in working to the brief provided."
Article and Insights
Article and Insights
Employee’s Appeal Dismissed: Employer not the Controller of Non-Work-Related Data on Work Phone
Court of Appeal dismisses appeal concerning an alleged personal data breach of non-work-related data on phone
Article and Insights
Age Assurance Builds: Where Does Ireland Stand?
France, the UK and Brussels are restricting kids' online access. Where does that leave Ireland?
Article and Insights
The EDPB’s Anonymisation Standard: New Draft Guidelines
When is personal data anonymous? The EDPB has published draft Guidelines 02/2026 setting out its standard for data anonymisation under the GDPR.
Article and Insights
Time Running Out as AI Transparency Guidelines Published
The Commission has published its final Article 50 guidelines mere days before the 2 August deadline.
Article and Insights
Cyber Resilience Act: What Manufacturers Need to Know
Top five Cyber Resilience Act points for manufacturers of 'products with digital elements'.
Article and Insights
Technology Report 2026 – Ireland: Country of Choice for Tech Investment
Ireland leads Europe for tech investment at 57%, driven by market access, ease of doing business, and tax incentives.
Article and Insights
A Record-Breaking Year: the Data Protection Commission’s Annual Report 2025
DPC's 2025 annual report shows a 45% complaints rise, AI-driven complaints, fewer breaches, growing inter-regulatory role, and reprimands.
Article and Insights
Technology Report 2026 – Cybersecurity: the Biggest Business Risk
The biggest perceived technology risk for Irish businesses remains cybersecurity and the related data protection liability exposure.
Article and Insights
EU Declines Video Game Playability Mandate
No EU mandate to keep games playable, but consumer law still bites for digital sellers.
