All Topics

The Irish High Court has clarified the scope of statutory exemptions under the Data Protection Act 2018, ruling that organisations can legitimately refuse data subject access requests when legal privilege, client confidentiality, or litigation interests are at stake. This landmark decision establishes clear boundaries between different exemption provisions and confirms their compatibility with GDPR Article 23, providing much-needed guidance for organisations navigating complex disclosure obligations.