Data Protection & Privacy

Visit our PrivacySource portal

For more insight, articles and videos on GDPR, please click here or on the image, to visit our exclusive PrivacySource portal. 


More than ever, organisations need certainty and clarity on the legal requirements which impact on their collection, use and disclosure of personal data. With a full understanding and insight into the political and commercial landscape surrounding data protection and privacy, together with our commercial results-driven approach, we strive to secure effective solutions for our clients.

Areas of expertise include:

  • EU General Data Protection Regulation
  • Data Protection Policy & Framework Development
  • Data Protection Audits & Reviews
  • Data Protection Training & Awareness Programs
  • Data & Privacy Officer Support
  • Privacy Impact & Risk Assessments
  • Data Sharing & Disclosure
  • International Transfers
  • Website & App Privacy Solutions
  • Outsourcing & Third Party Processing
  • Cybersecurity
  • Cloud Computing
  • Direct Marketing & Online Behavioural Advertising
  • Data Access Requests
  • Data Breach Management
  • Employment & Data Protection
  • Enforcement & Litigation
  • Strategic Data & Risk Management


Our experience includes advising/acting for:

  • One of the world’s largest software companies on issues arising from US proceedings regarding data stored in Ireland as well as strategic advices on the impact of Irish and European communications laws, data protection, privacy and security related matters.
  • A number of leading players in the retail, automotive, IT and insurance industries in conducting privacy impact assessments in relation to the introduction of a biometric, telematics and automated system.
  • A multichannel retailer in completing a data protection audit of its operational business processes and advising on risk mitigation solutions.
  • A leading International insurance provider in developing fair processing notices, privacy statements and policies, as well as the implementation of the Code of Practice on Data Protection for the Insurance Sector and on the outsourcing of certain of its activities internationally.
  • A public sector body in relation to the sharing of personal data between state bodies and agencies.
  • A multinational technology company on various privacy issues relating to its activities in Ireland including transfers of data and the interaction of data protection with related regulatory issues concerning telecommunications regulations, data retention and data interception.
  • One of Europe’s most prominent entertainment companies on issues regarding marketing preferences, consents and fair processing notices.
  • Leading businesses and organisations across various sectors providing tailored data protection training and awareness packages.

Generative AI Generates Infringement Litigation

Following the explosion of generative AI systems into the mainstream in 2022, the copyright infringement litigation has already started.

Christmas comes early for EU-US Data Transfers

The European Commission publishes a draft implementing decision to adopt an adequacy decision for the EU-U.S. Data Privacy Framework. The adequacy decision, which appears likely to be forthcoming, will permit organisations to transfer personal data from the EU to the U.S. under a new privacy framework giving the possibility of renewed legal certainty in early 2023.

One Month to Go: Data Transfer Deadline Day Approaching

There is one month to go until 27 December 2022, a key deadline day for any data transfers operating under the legacy standard contractual clauses.

Can a Competition Authority Assess a GDPR Breach?

In a case that reflects the growing intersection between data protection and competition law, a CJEU Advocate General has issued his opinion on when a national competition authority is entitled to consider an alleged breach of data protection law as part of a competition law investigation.

Record Fine Imposed on Instagram owner Meta for GDPR Infringement

Instagram owner Meta was recently issued its largest fine to date by the Data Protection Commission for infringements of the GDPR relating to the processing of children's data.

View all


  • Clients report that the team "provides consistently solid support and advice." Clients further praise the lawyers' ability to give quick responses on time-sensitive matters. Chamber Europe 2020 
  • One interviewee notes "The team understands our risk acceptability levels and works to provide strategic advice accordingly."  Another says:  "Encyclopaedic knowledge of the law combined with a business-friendly approach to advice." Legal 500 EMEA 2020
  • Clients exalt the team's combination of market insight and legal acumen: "they don't just give a quote of the law, but a commercial view and an explanation in the context of the market". Another interviewee says: "they inspired confidence immediately with their insight and advice on all matters and came with a deep knowledge of the market". ​Chambers Europe 2019
  • Clients note that the firm has a "young and innovative team" who are "always great to work with." Sources also appreciate that "they are up to date on new data protection regulations." Chambers Europe 2018
  • Clients praise the client-oriented nature of the advice "They offer a cogent, practical explanation of the law." Other interviewees value "the quality of the staff and the ability to recommend legal experts in other jurisdictions." Chambers EMEA 2017
  • David Cullen heads the "vibrant" practice at William Fry. Legal 500 EMEA, 2017
  • "This firm's passion and interest in the technology sector is outstanding - we have been tremendously impressed." Chambers Europe, 2016 
  • "The team has a wide range of experience that it brings to bear on specific issues, and provides timely and concise advice." Chambers Europe, 2016 
  • David Cullen’s team is noted for its ‘in-depth industry knowledge’. Legal 500 EMEA, 2016 


David Cullen

  • According to Chambers Europe 2020, David has been described by clients as "pragmatic and has a strong technology interest, which aids immensely in his understanding and his advice." 
  • One interviewee attests that he is "always available, responsive, timely and very well-versed." Chambers Europe 2019 
  • David Cullen is revered for his commercial prowess in intellectual property mandates. Chambers Europe 2018 
  • Practice head David Cullen "distils salient facts from complicated business scenarios"Legal 500 EMEA 2018 
  • David Cullen impresses clients with his commercial IP practice, one of whom praises his "absolute excellence in IP law, coupled with his strong technology and business acumen." Chambers Europe 2017
  • Esteemed practitioner David Cullen "has really incredible experience in the area of technology and IP, and is cool, calm and pragmatic," say sources. Chambers Europe 2016

Leo Moore

  • "Leo is very personable and as a lawyer, he is very responsive, cost efficient and always finds practical and commercially oriented solutions to solve the client’s issues." Legal 500 2020
  • According to sources, Leo "is very responsive and always finds practical, commercially oriented solutions." Chambers Europe 2020
  • Leo Moore is a towering figure in the market, widely respected for his advice on transactional matters, as well as outsourcing, data protection and the commercialisation of new technologies. Enthusiastic sources describe him as "super personable, kind, friendly, easy to talk to and proactive about keeping in contact." Others say Leo is "very approachable and provides the required advice in a form which is easily understandable for all around the table. He is very commercial in his delivery and solution-oriented." Chambers Europe 2019
  • Sources describe Leo Moore as an “extremely smart lawyer” and appreciate that he is “responsive, easy to talk to and always clear about the next step.” He is praised for his handling of multi-jurisdictional patent licensing mandates and strategic IP advice. Chambers Europe 2018
  • Leo is "practical and diligent"Legal 500 EMEA 2018
  • "Leo is a "top-notch lawyer" who is noted for his expertise in the technology sector and is often called upon to manage large IP portfolios for prominent companies" according to Who's Who Legal: Trademarks 2018  
  • One client says he is "easy to work with, very good at breaking down complex issues and provides clear advice." Chambers Europe 2017
  • According to sources, Leo Moore is "very good at grasping technical issues, and explaining them in a non-technical manner," with one adding: "One of the best things is that he figures out how to make things happen, never coming back with reasons not to do things." Chambers Europe 2016

John O'Connor

  •  John  is a respected practitioner, advising on large-scale technology and outsourcing mandates, as well as assisting with cybersecurity, data protection and privacy issues. Clients appreciate "his breadth of knowledge and his definitiveness." Chambers Europe 2019
  • Sources praise John O'Connor's technical proficiency, observing that he is "very good to deal with." His expertise lies in technology and outsourcing transactions, encompassing systems integration, implementation arrangements and licensing matters. Chambers Europe 2018
  • John O’Connor is "practical and diligent". Legal 500 EMEA 2018
  • John O'Connor has significant experience of advising technology, life sciences and financial services organisations on an array of technology-related matters. Clients say that he is "incredible to work with." Chambers Europe, 2017

Key Contacts

David Cullen Partner

Leo Moore Partner

John O'Connor Partner

View All