Skip to main content
๐Ÿ‡ฎ๐Ÿ‡ช Ireland ยท EU GDPR

Ireland Data Removal Guide (2026)

Irish residents can exercise GDPR and Data Protection Act 2018 rightsโ€”including access, objection, and erasure where the legal conditions applyโ€”when reviewing information held by commercial data brokers, direct-marketing firms, and directories.

Research status: sources last checked 2026-09-07.

This page is educational orientation, not legal advice. The legal fields below are a research snapshot; eligibility, exemptions, deadlines, penalty rules and broker routes can change. Verify the current statute and regulator guidance before relying on a right or filing a complaint.

At a glance

Governing law
EU GDPR
Response deadline
Without undue delay and within 1 month; extendable by 2 further months for complexity or the number of requests, with notice and reasons given within the first month
Regulator
Data Protection Commission (DPC)
Private right of action
Yes: compensation under Article 82 GDPR and Section 117 Data Protection Act 2018

EU General Data Protection Regulation (GDPR) + Data Protection Act 2018

Ireland applies the EU GDPR alongside the national Data Protection Act 2018. The Data Protection Commission (DPC) is the Irish supervisory authority; the framework provides rights of access, rectification, erasure, and objection subject to the relevant conditions and exceptions.

Read the full EU GDPRexplainer โ†’Scope, penalties, private right of action, enforcement history.

What rights do Ireland residents have?

  • โ†’Right of access (Subject Access Request, Article 15)
  • โ†’Right to erasure / "Right to be Forgotten" (Article 17)
  • โ†’Right to object to processing and direct marketing (Article 21)
  • โ†’Right to restriction of processing (Article 18)
  • โ†’Right to seek compensation for qualifying damage from an infringement (Article 82 GDPR / Section 117 Data Protection Act 2018)
  • โ†’Right to lodge a complaint with the Data Protection Commission (Article 77)

Who holds your data in Ireland?

Ireland hosts European headquarters for international technology and advertising companies, while local exposure can arise from the Companies Registration Office (CRO), the current Register of Electors, business records, and commercial B2B contact-intelligence platforms. The Electoral Reform Act 2022 abolished the edited register and introduced an anonymous-elector route for qualifying safety risks.

Public-record sources brokers scrape

  • Companies Registration Office (CRO) director filings and Solo Trader business name records
  • Register of Electors maintained by local authorities; anonymous registration is available for qualifying safety risks
  • Irish Credit Bureau (ICB) and Central Credit Register (CCR) records
  • International marketing aggregators and B2B email scrapers

How to remove your data in Ireland

  1. 1Submit GDPR Article 17 erasure and Article 21 marketing objection requests to commercial marketing data brokers.
  2. 2If publishing your name and address could put you or a household member at risk, ask your local registration authority about applying as an anonymous elector under the current electoral-registration process; the former edited register was abolished.
  3. 3Contact the National Directory Database (NDD) via your telecom provider to mark your phone number as ex-directory / opt-out of marketing.
  4. 4Lodge a complaint with the Data Protection Commission (DPC) if an organisation does not handle an access, objection, or erasure request within the applicable GDPR process and timeframe.

Generate requests in under 60 seconds

Generate requests for 1,034 US/global broker workflows for $9

Some Ireland residents may encounter US-based people-search providers. OfflistMe can prepare source-aware deletion-request drafts for selected recorded workflows; you review the route and applicable law, then send from your own inbox. No account or ID upload to OfflistMe is required for drafting. Pair it with the Ireland-specific steps above.

What if a company ignores your request?

Consider the Data Protection Commission (DPC) information or complaint route above if the controller does not respond or the response is unsatisfactory. This guide records the following penalty orientation: โ‚ฌ20 million or 4% of worldwide annual turnover, whichever is higher. The private-action note is: Yes: compensation under Article 82 GDPR and Section 117 Data Protection Act 2018. Neither field is an individual award or a promise of enforcement.

Open the Data Protection Commission (DPC) information or complaint route โ†—

FAQ: Ireland data removal

How do I stop direct marketing calls in Ireland?+

Ask your line provider to record your preference in the National Directory Database (NDD) Opt-Out Register. Covered unsolicited marketing calls from within Ireland are restricted when the preference is recorded, but existing relationships, mobile-consent rules, non-marketing calls, and calls from outside Ireland can change the result.

How do I send a GDPR deletion request in Ireland?+

Send a written access or erasure request citing the relevant GDPR right to the controller or DPO. The controller generally has one month to respond under Article 12, with possible extensions for complex requests and exceptions that may permit retention.

Related resources

Other country guides