Ireland’s next chapter in digital regulation: Why engagement with regulators matters

While the rules are set at European level, engagement with Irish regulators is essential to shaping how they work in practice. The regulatory landscape is evolving rapidly. From the Digital Services Act (DSA) and Digital Markets Act (DMA) to the EU AI Act, the Data Act and NIS2, the rules governing digital markets are multiplying. Each law has its own objectives, such as platform accountability, competition, and cybersecurity. Taken together, they create a dense web of obligations for businesses.

Ireland’s dual role as a national regulator and an EU enforcement hub means that decisions made here have an impact across Europe. This makes early engagement with policymakers and regulators a strategic priority. However, engagement does not end when a law is passed or a policy comes into force. The real impact is determined by how these rules are interpreted, implemented, and enforced. This is an ongoing process where industry input remains essential.

The EU’s AI Act is a prime example. As the world’s first comprehensive AI regulation, it introduces a risk-based framework for AI systems. Ireland has chosen a federated enforcement model, designating 15 competent authorities and planning a National AI Office by 2026. This approach brings both complexity and opportunity. Sectoral regulators will need guidance, and businesses can play a critical role in shaping practical, innovation-friendly approaches.

With Ireland’s implementing legislation scheduled for priority drafting this autumn, now is a crucial time to engage and highlight potential risks and unintended consequences for business. Even after the law is enacted, ongoing engagement will be necessary to influence how guidance is developed, how enforcement priorities are set, and how regulatory expectations evolve.

The DSA and DMA are already in force, but their interpretation and enforcement are still evolving. Coimisiún na Meán is leading on DSA oversight in Ireland, and the way obligations on content moderation and algorithmic transparency are applied will depend on ongoing dialogue between regulators and industry. Similarly, Ireland’s upcoming National Cybersecurity Bill, which will transpose NIS2, introduces strict security requirements and even personal liability for executives. Industry input can help ensure proportionality and clarity in how these requirements are implemented.

Ireland’s federated approach to AI oversight adds another layer of complexity. Instead of a single central regulator, this model spreads responsibility across multiple authorities, from the Central Bank to the Data Protection Commission. While this allows businesses to engage with familiar regulators, it also creates challenges. Many regulators do not yet have AI expertise, and there is a real risk of inconsistent enforcement. For businesses, this is a critical window to educate, inform, and collaborate. By engaging early and consistently, companies can help shape guidance, influence enforcement priorities, and ensure innovation is not stifled by uncertainty.

Regulation is no longer a back-office issue, it is now a boardroom priority. Businesses that treat policy engagement as a core capability will gain a competitive edge. This means building relationships with regulators and policymakers, participating in consultations, and providing evidence-based input to shape practical, innovation-friendly rules. Those who lead the conversation will not only manage risk, they will help shape the future of their sector.

By Emer Sugrue, Director