IrelandWhat is the legal basis for processing personal data?
The legal basis for processing personal data in Ireland is set out in the Data Protection Act 2018 and the GDPR, requiring at least one lawful basis (e.g., consent, contract, legal obligation) before processing can occur.
What the Law Says
In Ireland, the processing of personal data must comply with both the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018. The Act gives domestic effect to the GDPR and sets out supplementary rules, including enforcement powers and exemptions.
Under Article 6 of the GDPR — which forms part of Irish law — processing is lawful only if at least one condition applies: the data subject’s consent; necessity for a contract; compliance with a legal obligation; protection of vital interests; performance of a task in the public interest; or pursuit of legitimate interests (unless overridden by the data subject’s rights).
Section 38 of the Data Protection Act 2018 does not itself define lawful bases but supports GDPR implementation by empowering the Data Protection Commission to enforce compliance, investigate complaints, and impose sanctions.
The GDPR is directly applicable in Ireland, meaning its provisions — including Article 6 — have full legal force without needing transposition. The 2018 Act fills gaps, such as specifying criminal offences for unlawful processing and setting rules for data processing by public authorities.
What to Do
Identify and document which lawful basis under GDPR Article 6 applies to each processing activity.
If relying on consent, ensure it is freely given, specific, informed, and unambiguous — and that individuals can withdraw it easily.
Carry out a Data Protection Impact Assessment (DPIA) for high-risk processing.
Maintain records of processing activities as required under GDPR Article 30.
Report personal data breaches to the Data Protection Commission within 72 hours where feasible.
Sources
Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.