Loan market and developments Please provide a brief overview of the current state of the loan markets in your jurisdiction and any significant recent market developments The Irish retail banking sector now comprises three main banks (AIB, Bank of Ireland and Permanent TSB) following the exits of both KBC and Ulster Bank during 2022. There are a number of non-bank lenders operating in the Irish market, some of whom are authorised by the Central Bank of Ireland (CBI) as retail credit firms as they lend to individuals, and some of whom are authorised by the CBI as credit servicing firms (in-scope credit agreements for the purposes of the Irish credit servicing framework are those entered into with individuals (subject to limited exceptions) and, to the extent that the loan was originated by a regulated financial services provider (RFSP) and then sold, a loan to a small or medium enterprise). Overall lending by domestic banks to Irish businesses decreased in Q4 2025 when compared to the same quarter of the previous

DPIA screening questionnaire The screening questionnaire should be a concise document and not overly burdensome on the business. However, it needs to provide sufficient information to the DPO/Privacy POC to decide if a DPIA needs to be completed. Like the DPIA itself, the screening questionnaire will be drafted by a multidisciplinary team within the business. All completed screening questionnaires should be approved, time-stamped and retained by the DPO/Privacy POC. Where a DPIA is required, it should be kept with the screening questionnaire to avoid duplication. The DPIA template is a continuation of the screening questionnaire. While the screening questionnaire and the DPIA detail AI use in accordance with EU GDPR requirements, companies deploying AI systems also need to factor in their obligations under additional relevant legislation, such as the requirement to carry out a fundamental rights impact assessment (FRIA) under the EU AI Act. While outside the scope of this document, information gathered as part of the screening questionnaire / DPIA exercise will be needed to carry out the FRIA. The screening

This article, written by Mary Gavin and Laura Higgins Mulcahy of Ogier Ireland, explores changes made by the Irish Employment Permits Act 2024 which came into force on 2 September 2024.

MLex: Individuals seeking compensation under the EU's privacy law need to prove that they suffered damage from a data breach, the EU's highest court confirmed on 25 January 2024. Article 82 of the GDPR requires proof that damage has occurred before individuals can be granted compensation from the data controller responsible, judges at the EU Court of Justice said in a ruling that echoes a similar finding in a separate case in December 2023.

Ireland-Banking & Financial Services analysis: This article was written by A&L Goodbody’s Financial Regulation Advisory Team. The Minister for Finance published the first national strategy to strengthen Ireland’s fight against money laundering, terrorist financing and proliferation financing.

Ireland-Banking & Financial services analysis: This article, was written by Sarah Thompson, Robert Cain and Katherine Quirke of Arthur Cox and considers Ireland’s National Risk Assessment on money laundering, terrorist financing and proliferation financing 2026 and the related 30-point Priority Action Implementation Plan for 2026–2027. It outlines key AML/CFT/CPF risks for financial services, including banks, funds, VASPs, payment institutions and e-money institutions, and explains planned measures on Central Bank supervision, emerging technologies, beneficial ownership and limited partnerships.

Law360, London: The Central Bank of Ireland has said that it will investigate whether insurers in the republic have sufficient guardrails against the unethical use of new artificial intelligence technology.

Law360, London: The Central Bank of Ireland (CBI) fined cryptocurrency exchange Coinbase €21.4m on 6 November 2025 for breaking anti-money laundering (AML) rules after it failed to adequately screen transactions worth billions of euros, some of which it later tied to organised crime, fraud and scams.

Law360: Ireland's corporate tax receipts in the near term may see a boost after a pharmaceutical group front-loaded exports to the US ahead of expected tariffs on imported pharmaceuticals, but the overall impact of tariffs on the year-to-year revenue haul is expected to be incredibly volatile, an Irish budget watchdog said 12 November 2025.

Ireland—Dispute Resolution analysis: This article, was written by Paul Convery and Adele Hall of William Fry LLP and discusses the Irish Court of Appeal’s decision to allow Google to be added as a defendant in a defamation case involving a YouTube video. The High Court had initially ruled against this, citing the statute of limitations, but the appeal court found that Google’s liability could have arisen later when it failed to remove the video after receiving a complaint.

The Irish Data Protection Commission (DPC) has imposed a €251m fine on Meta Platforms Ireland Limited following two inquiries into a 2018 data breach affecting 29 million Facebook accounts globally. The DPC found infringements of Regulation (EU) 2016/679 (GDPR) Articles 33(3), 33(5), 25(1), and 25(2), relating to breach notification, documentation, and data protection by design and default. The decision highlights the importance of integrating data protection requirements throughout system development to prevent serious risks to individuals' fundamental rights and freedoms.

The Irish Data Protection Commission (DPC) has issued a fine of €345m to TikTok Technology Limited (TikTok) pursuant to section 111 of the Data Protection Act 2018 and Articles 60 and 65 of the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) for infringing the EU GDPR's principle of fairness when processing personal data regarding children between the ages of 13 and 17.  The Irish DPC adopted its decision to fine TikTok on 1 September 2023 and noted various violations of the EU GDPR articles. These included Articles 5(1)(c), 5(1)(f), 24(1), 25(1), 25(2), 12(1), 13(1)(e), and 5(1)(a). The decision also exercised other corrective measures, which included a reprimand and an order requiring TikTok to bring its processing into compliance by taking the action specified within a period of three months from the date on which the Irish DPC’s decision is notified to TikTok.