Cyber Incident Response Team

Insights Technology

National Cyber Security Bill 2024 General Scheme Published

3 Top Tips for Businesses

Ireland's new National Cyber Security Bill 2024 is set to enhance cybersecurity measures across critical sectors. The Bill, which will give effect…

16/09/24

Our multidisciplinary Incident Response Team consists of lawyers from our Privacy & Data Security, Public Law and Litigation & Dispute Resolution Teams.

The team has significant expertise working with clients on all issues around national and cross-border security incidents and personal data breaches at each stage of the journey - from Data Breach Readiness, Incident Response Management, DPC Investigations and Inquiries and Litigation and Dispute Resolution.

Our team has experience across the entire incident response regulatory regime including the GDPR, the NIS Directive, ePrivacy, the Telecoms Framework and the Law Enforcement Directive

Related Services

Data Breach Readiness

Incident response frameworks
Accountability documents, runbooks
Incident response simulation exercises
Advice on managing privilege
General GDPR compliance

Incident Response Management

• Investigations

• General crisis management

• Evidence gathering

• Strategic planning

• Notifications to regulators, law enforcement and data subjects

• Post breach incident reports and lessons learned exercises

DPC Investigations and Inquiries

Responding to RFIs from the DPC

Defending organisations in investigations and inquiries
Appeals and judicial reviews of DPC decisions

Litigation and Dispute Resolution

Providing strategic advice to mitigate risk of claims
Defending claims - insured and non-insured

Recent Work

Advised a technology company on an urgent and complex global data breach arising from a bug permitting circumvention of account takeover prevention measures, which was open to be exploited over a number of years.
Advised a loyalty marketing company on a security breach affecting 1.5m users across Europe resulting in the disclosure of customer credit card details, where the company was ordered by the DPC to delete all personal data held for the purpose of providing services to its clients.
Advised a public body on a security breach. Carried out an on-site risk assessment of the incident, advised on whether the incident was notifiable and subsequently drafted notifications to the DPC and data subjects.
Advised a US headquartered gaming company on a global data breach which involved notifications being made to the DPC and data subjects. The breach resulted in a threatened multi-plaintiff lawsuit in Ireland and a class action issued in the US.
Advised a major Irish financial institution in the defence of multiple Circuit Court proceedings relating to alleged GDPR infringements.

Your Dedicated Team

Philip Nolan

Chair

+353 86 812 4140

pnolan@mhc.ie

Explore More

Cyber Incident Response Team

National Cyber Security Bill 2024 General Scheme Published