Data Protection Legal Services

For individuals enforcing their rights, and for small organisations meeting their obligations.

Data protection law has two audiences and most legal content serves only one of them. Our practice deliberately serves both: the employee who needs their personnel file, the customer whose data leaked, the neighbour filmed by a doorbell camera — and the shop, club, school or practice that holds data and needs to handle it lawfully without drowning in paperwork.

Enforcing your rights

The GDPR gives you enforceable rights over your personal data: access, rectification, erasure, objection and more. We draft and pursue requests, escalate non-compliance, and advise on the realistic remedies when rights are refused or ignored.

Data access requests — drafting, pursuing and enforcing
Right to erasure and search engine delisting
Access to medical records and other special category data
Rectification of inaccurate records

Breaches, compensation and complaints

When an organisation mishandles your data — a leak, wrongful disclosure, unlawful CCTV use — the law provides two distinct routes: a complaint to the Data Protection Commission, and a court action for compensation under the Data Protection Act 2018. They do different things, and choosing between them (or running both) is a strategic decision we advise on honestly.

Data breach compensation claims for material and non-material damage
Complaints to the Data Protection Commission
CCTV, doorbell camera and neighbour surveillance disputes
Unlawful disclosure and mixed data disputes

The workplace

Data protection and employment law overlap constantly, and we practise both. Access requests are a standard preparatory step in workplace disputes; monitoring, CCTV and investigation files raise data questions with employment consequences; references sit at the junction of both.

Access requests in employment disputes
Employee monitoring and workplace CCTV
Data protection aspects of disciplinary investigations and references

Compliance for small organisations

Most compliance guidance is written for enterprises with legal departments. Small organisations need something else: proportionate, practical compliance that fits how they actually operate. We provide it for businesses, landlords, clubs, charities and schools.

GDPR compliance reviews and documentation for SMEs
Privacy notices, records of processing and processor contracts
Data breach response — the 72-hour process, done right
Clubs, charities and schools: members, volunteers and children's data
Landlords: tenant data, references and cameras

Free on-device tools

Two tools run entirely in your browser — nothing you enter is stored or transmitted. The Data Access Request Generator produces a complete Article 15 request letter from your answers. The Data Breach Response Checklist walks an organisation through the first 72 hours after a breach is discovered.

Talk to a GDPR solicitor

Mary Molloy Solicitors acts for individuals and organisations across Ireland on data protection matters — access requests, breaches, compensation claims, complaints and compliance. All enquiries are handled through our Dublin office.

This page contains general information about Irish law and practice. It is not legal advice, it may not reflect your circumstances, and reading it does not create a solicitor–client relationship with Mary Molloy Solicitors. We do not advise on taxation; please speak to your accountant or Revenue. In contentious business, a solicitor may not calculate fees or other charges as a percentage or proportion of any award or settlement.