Skip to main content

    AI by country · Western Europe

    AI in Ireland: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Ireland know before starting with AI?

    In Ireland, AI that uses personal data falls under the GDPR and the Data Protection Act 2018, supervised by the Data Protection Commission. The EU AI Act applies in stages, and the Regulation of Artificial Intelligence Act 2026 sets up how it is enforced here, through sector regulators coordinated by a new AI Office of Ireland. A company should check which AI Act risk category each system falls into and which Irish regulator will supervise it.

    At a glance

    Ireland at a glance

    Key facts about Ireland
    Data protection lawGDPR (applies since 25 May 2018) and the Data Protection Act 2018
    RegulatorData Protection Commission (DPC); AI Office of Ireland coordinates AI Act enforcement
    AI policyEU AI Act, applied in Ireland through the Regulation of Artificial Intelligence Act 2026 (signed 21 July 2026); National AI Strategy Refresh 2024
    Time zoneGMT, UTC+0 in winter; IST, UTC+1 in summer (India is 5.5 or 4.5 hours ahead)
    CurrencyEUR (euro)
    Business languageEnglish (Irish is also an official language)

    Why now

    Why Ireland is worth watching

    Each point links to the document it comes from.
    • The CSO reports that 20.2% of enterprises used AI in some form in 2025, rising to 57.7% of large enterprises.[9]

    • The Regulation of Artificial Intelligence Act 2026 was signed into law on 21 July 2026, and Paul Byrne was named first chief executive of the AI Office of Ireland.[5]

    • Most of the EU AI Act applies from 2 August 2026, while rules for high-risk uses listed in Annex III now start on 2 December 2027.[2]

    • The DPC published an AI Insights Report on 24 September 2026, naming legitimate interests for AI training and transparency as its two priority areas.[7]

    • The National AI Strategy Refresh of November 2024 includes an SME awareness campaign on AI adoption and an AI regulatory sandbox.[8]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    GDPR and the Data Protection Act 2018

    In force2018The GDPR applies from 25 May 2018, and the Data Protection Act 2018 gives it further effect in Irish law and sets national rules, such as limits on certain rights. For AI this means a lawful basis for each use of personal data, transparency, and a risk assessment before deploying AI that could harm people. The DPC is the supervisor.[1]

    EU AI Act, Regulation (EU) 2024/1689, as amended by the AI Omnibus

    Phased2024Banned practices and AI literacy have applied since 2 February 2025, and general-purpose AI rules since 2 August 2025. Most other rules, including telling people they are talking to a chatbot, apply from 2 August 2026. After the AI Omnibus entered into force on 27 July 2026, high-risk rules apply from 2 December 2027 for Annex III uses such as hiring and credit scoring, and 2 August 2028 for AI in regulated products.[2]

    Regulation of Artificial Intelligence Act 2026

    Phased2026This Act adds no duties beyond the EU AI Act. It sets up a distributed model where sector regulators act as market surveillance authorities, including the Central Bank of Ireland and the Competition and Consumer Protection Commission. The AI Office of Ireland is the single point of contact and coordinator. We did not confirm the commencement date of every section, so we list it as phased.[4]

    Where AI fits first

    Where AI fits first

    Financial services

    Drafting customer correspondence, reviewing documents for anti-money laundering checks and handling routine queries.

    The Central Bank of Ireland is a market surveillance authority under the 2026 Act and can use its existing sanctions procedure for AI Act breaches. Credit scoring of individuals is a high-risk use from 2 December 2027.[4]

    Technology and online platforms

    Training or fine-tuning models on user content, and recommender systems.

    The DPC's AI Insights Report covers its work on large language models and recommender systems, and flags legitimate interests for AI training as a focus.[7]

    Retail and consumer services

    Chatbots for customer service and product search.

    The Competition and Consumer Protection Commission is named as a market surveillance authority. Chatbot transparency duties under the AI Act apply from August 2026.[4]

    Small and medium enterprises

    Using office AI tools for drafting, summarising and search across internal documents.

    The CSO found AI use at 17.2% of small enterprises in 2025, against 57.7% of large ones. The DPC advises understanding what personal data a tool uses and where it goes before adopting it.[9]

    Your first steps

    Your first steps

    1. List every AI tool you use or build, and sort each into an AI Act risk category: banned, high-risk, transparency, or minimal.
    2. Give staff AI literacy training, which the AI Act has required since 2 February 2025.
    3. Before adopting a third-party AI tool, check what personal data it uses, where the data goes and whether the provider reuses it, as the DPC advises.
    4. Run a data protection impact assessment for AI that profiles people or makes decisions about them, and keep a person in the loop.
    5. Work out which Irish regulator would supervise your AI under the 2026 Act, for example the Central Bank for financial firms.
    6. If any system may be high-risk, plan documentation, logging and human oversight now for the 2 December 2027 start date.
    7. If personal data will be accessed from India or another non-EU country, put a GDPR transfer mechanism in place first.

    AI services for Ireland

    AI consulting and development for teams in Ireland

    We work remotely with companies in Ireland, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. India (UTC+5:30) works 9:30 to 18:30, which is 04:00 to 13:00 UTC. In Irish winter (UTC+0) that gives about 4 hours of overlap, 09:00 to 13:00 Irish time; in summer (UTC+1) about 5 hours, 09:00 to 14:00. India has no EU adequacy decision, so any personal data we access from India needs a GDPR transfer mechanism such as standard contractual clauses.

    Questions

    Common questions about AI in Ireland

    Who enforces the EU AI Act in Ireland?

    Several sector regulators acting as market surveillance authorities, under the Regulation of Artificial Intelligence Act 2026. The AI Office of Ireland coordinates them and is the single point of contact for the European Commission.

    Did the EU delay the AI Act?

    Partly. The AI Omnibus, in force since 27 July 2026, moved the high-risk rules to 2 December 2027 for Annex III uses and 2 August 2028 for regulated products. Bans, general-purpose AI rules and most transparency duties were not delayed.

    Can we use customer data to train an AI model?

    Only with a valid lawful basis under the GDPR and clear information to the people concerned. The DPC has named legitimate interests for AI training as a priority area, so document your assessment carefully.

    What should we ask an AI vendor?

    The DPC suggests asking what personal data the system uses, where it goes, whether the provider keeps or reuses it, and whether you can still answer access and deletion requests.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Data Protection Commission, 2026-10-29. Data protection legislation(dataprotection.ie)
      Full title and what we used it for

      Data protection legislation. Primary, accessed on this date. Used for the GDPR application date and the role of the Data Protection Act 2018.

    2. [2] European Commission, 2026-10-19. AI Act: regulatory framework for AI(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      AI Act: regulatory framework for AI. Primary. Used for the AI Act timeline and the AI Omnibus, which the page says entered into force on 27 July 2026. The Omnibus is Regulation (EU) 2026/1744 per the NI Assembly EU law tracker; we could not open EUR-Lex directly.

    3. [3] European Commission, 2026-09-07. Market Surveillance Authorities under the AI Act(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      Market Surveillance Authorities under the AI Act. Primary. Used to confirm the AI Office of Ireland is listed as Ireland's single point of contact.

    4. [4] Department of Enterprise, Tourism and Employment, 2026-06-17. Publication of the Regulation of Artificial Intelligence Bill 2026(enterprise.gov.ie)
      Full title and what we used it for

      Publication of the Regulation of Artificial Intelligence Bill 2026. Primary. Used for the distributed model, the named authorities (Central Bank, CCPC, AI Office) and that the Bill adds no obligations beyond the EU AI Act. Law-firm commentary (William Fry, Matheson) differs on whether the AI Office will also become a market surveillance authority; we do not state that.

    5. [5] Department of Enterprise, Tourism and Employment, 2026-07-30. AI Office of Ireland established under the AI Regulation Bill 2026, Pau…(enterprise.gov.ie)
      Full title and what we used it for

      AI Office of Ireland established under the AI Regulation Bill 2026, Paul Byrne appointed as CEO. Primary. Used for the signing into law on 21 July 2026, the AI Office's role and the CEO appointment.

    6. [6] Data Protection Commission, 2024-07-18. AI, Large Language Models and Data Protection(dataprotection.ie)
      Full title and what we used it for

      AI, Large Language Models and Data Protection. Primary. Used for the DPC's questions to ask before adopting AI tools.

    7. [7] Data Protection Commission, 2026-09-24. DPC AI Insights Report(dataprotection.ie)
      Full title and what we used it for

      DPC AI Insights Report. Primary. Used for the publication date, coverage of 2021 to 2025 and the two priority areas.

    8. [8] Department of Enterprise, Tourism and Employment, 2024-11-06. National AI Strategy Refresh 2024(enterprise.gov.ie)
      Full title and what we used it for

      National AI Strategy Refresh 2024. Primary. Used for the publication date and key actions.

    9. [9] Central Statistics Office, 2026-02-06. Artificial Intelligence, Information Society Statistics - Enterprises 2…(cso.ie)
      Full title and what we used it for

      Artificial Intelligence, Information Society Statistics - Enterprises 2025. Primary. Used for AI use by 20.2% of enterprises, 57.7% of large and 17.2% of small enterprises in 2025.

    10. [10] European Commission, 2026-10-29. Adequacy decisions(commission.europa.eu)
      Full title and what we used it for

      Adequacy decisions. Primary, accessed on this date. Used to confirm India has no EU adequacy decision.

    This is general information, not legal advice. The AI Act timeline changed in 2026 and Irish enforcement structures are new. Check with a qualified Irish solicitor before you act. Facts checked on 29 October 2026.

    Starting with AI in Ireland?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.