Ireland: Technology

The EU's Cyber Resilience Act introduces mandatory cybersecurity obligations for products with digital elements placed on the EU market. Understanding the five key manufacturer obligations—from secure-by-design requirements to incident reporting deadlines—is essential for compliance with this groundbreaking regulatory framework that elevates cybersecurity from best practice to legal requirement.

Cybersecurity has emerged as the most critical technology risk facing Irish businesses, yet a significant confidence gap exists in their ability to counter AI-driven threats.

The European Union's evolving regulatory landscape for artificial intelligence, cybersecurity, and health data is creating new compliance challenges and opportunities for life sciences organizations. From the AI Act's refinements to the delayed NIS2 Directive transposition in Ireland, stakeholders must navigate multiple intersecting frameworks while preparing for the European Health Data Space Regulation's implementation.

The European Commission updated its State aid review timetable (PDF 440 KB), confirming that work is ongoing on revisions to key State aid instruments, including the General Block Exemption Regulation, the State Aid Guarantee Notice, the Rescue and Restructuring Guidelines, the ETS State aid guidelines and the aviation State aid framework.

On 30 June 2026, the Irish Data Protection Commission (“DPC”) released its 2025 annual report (“Report”).1 The Report covers the eighth year of the DPC’s enforcement of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

The European Commission's AI Digital Omnibus proposes targeted amendments to the EU's AI Act, aiming to simplify compliance requirements and address implementation challenges while maintaining core safeguards. The revision extends timelines for high-risk AI systems and provides additional regulatory privileges for small and mid-cap enterprises navigating the world's first comprehensive horizontal legal framework for artificial intelligence.

Irish financial services regulations undergo significant updates as MiCA guidelines are incorporated into competency codes, investment firm regulations are amended to address concentration risks, and the Credit Review Act framework takes effect. Meanwhile, European authorities advance sustainable finance transparency rules and strengthen banking supervision methodologies.

This monthly legal update from William Fry explores critical developments across technology regulation, AI transparency obligations, and commercial litigation frameworks. The edition examines emerging challenges in data centre connectivity, merger control threshold changes, and the evolving landscape of warranty insurance in M&A transactions, while addressing novel legal arguments in nervous shock claims and regulatory consultations on crypto-asset markets.

Ireland's Department of Finance has released its third National Risk Assessment on Money Laundering, Terrorist Financing and Proliferation Financing, identifying very significant risks in retail banking, digital banking, crypto-assets, and payment institutions. The assessment is accompanied by a comprehensive 30-Point Action Plan designed to strengthen Ireland's financial crime response framework over the next 18 months through enhanced regulatory oversight, beneficial ownership transparency, and sector-spe