ciara_kelly_web_large

Ciara Kelly

Associate
About

Ciara advises domestic and global clients across the technology, financial services, life science and consumer goods sectors on a broad range of ​​data protection, privacy and cybersecurity matters. She works closes with clients on data protection compliance international data transfers, data subject rights, cybersecurity matters and regulatory engagement.

She advises on a range of EU digital and technology regulation including the GDPR, ePrivacy, AI Act and NIS2 and regularly supports clients on complex cross border protects, investigations and incident response matters.

Professional QualificationsSolicitor regulated by the Law Society of Ireland
Education
  • Professional Practice Course, The Law Society of Ireland, 2023
  • University College Dublin, MCL (Masters of Common Law), 2021
  • University College Dublin, BA Hons (Economics and Politics), 2019

EXPERIENCE

Ciara’s experience includes advising:

  • An international radiology provider on their international data transfer strategy following the Schrems II Decision, which involved advising on their entire Chapter V GDPR compliance framework across more than 10 jurisdictions.
  • A leading Australian healthcare and pharmacy group on a global data protection support project, including an intragroup data transfer agreement, transfer impact assessments and advice on enterprise systems, health and safety platforms and vendor transfer arrangements on a global basis.
  • A global media company on all GDPR compliance requirements including their data mapping and vendor diligence, data processing agreements, and risk assessments.
  • A global packaging and paper company in relation to an international cyber incident involving the personal data of over 48,000 employees worldwide, including regulatory and data subject notifications and employee comms strategy.
  • One of Ireland's leading retail banks on their international data transfers following the Schrems II Decision, which involved advising on transfer impact assessments.
  • A global aviation services provider on comprehensive GDPR compliance, including developing their data protection notices, data subject rights policy and response templates to handle such requests.