Ireland supports a balanced and open approach to data sovereignty, grounded in strong EU-wide regulation, the protection of data under EU law, and the maintenance of open markets and cross-border data flows, while also strengthening Europe’s capacity in data storage, processing, cloud and AI.
Data sovereignty generally refers to the principle that data is subject to the laws of the jurisdiction in which it is collected and processed. In a global cloud environment, this can mean that data is subject to multiple legal frameworks.
At European level, this approach is reflected in a number of key legislative measures. The General Data Protection Regulation (GDPR), in force since May 2018, provides a comprehensive framework for the protection of personal data and ensures individuals have greater control over their information across the EU. The EU Data Act, which has applied since 12 September 2025, further supports data sovereignty by promoting a fairer and more accessible data economy, including safeguards for non-personal data. In addition, the proposed Cloud and AI Development Act, published on 3 June 2026, aims to strengthen Europe’s cloud and AI capabilities, reduce critical dependencies, and enhance data processing and storage capacity within the Union.
At national level, the Government’s Digital Ireland strategy recognises data as a cornerstone of our digital economy and a key enabler of artificial intelligence. It emphasises treating data as a strategic national asset, ensuring it is accessible, interoperable and trusted, while aligning with EU frameworks. This approach supports innovation across data-intensive sectors such as manufacturing, technology, finance and healthcare, and benefits enterprises of all sizes.
Ireland supports the safeguards introduced under the EU Data Act to ensure that data generated within the EU is governed by EU law and protected from unauthorised access by third countries. While the Regulation has direct effect, national legislation is required to designate and empower competent authorities. In this regard, Government approved on 8 October 2024 the designation of the Competition and Consumer Protection Commission and ComReg as the relevant authorities. Primary legislation to give further effect to the regulation is currently being progressed.
Ireland also welcomes the ambition of the Cloud and AI Development Act to strengthen Europe’s digital infrastructure and reduce strategic dependencies.