Unadhi · Ireland

AI use policy for Irish SMEs: what the DPC expects (GDPR + AI)

The DPC's 2025 Annual Report records 6,521 breach notifications and €530.77m in fines. It describes a case where an employee uploaded 32 CVs to a free AI tool with no AI governance framework (DPC report; Arthur Cox summary). The DPC's AI Insights Report (Sep 2026) focuses on lawful basis, transparency and notice periods before training AI on personal data (DPC). What to do: write a one-page AI use policy (approved tools, no personal data in free tools), keep an AI inventory, and run DPIAs for higher-risk uses.

Free next step

Get a free one-page AI system inventory drafted from your public website. Reply YES via unadhi.com, or start with these tools: - EURO AI Register: keep your AI inventory and deadlines in one place, $19/mo or $190/yr. https://unadhi.com/register/ · https://mininglife1.gumroad.com/l/euro-ai-register - Need a list of Irish suppliers or competitors? Our Apify actor: https://apify.com/laudable_instrument/contact-details-scraper-half-price

General information, not legal advice. Sources are linked inline; checked 13 Oct 2026.