Ireland: technology regulation at a glance

Framework: EU Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114), applied in Ireland by the European Union (Markets in Crypto-Assets) Regulations 2024 (S.I. No. 607/2024); Central Bank of Ireland is the national competent authority. Pre-existing VASP registration regime under the Criminal Justice (Money Laundering and Terrorist Financing) (Amendment) Act 2021 remains relevant during transition.

Crypto is legal in Ireland and now sits inside a comprehensive EU-level regulatory framework. MiCA stablecoin (ART/EMT) rules have applied since 30 June 2024 and the full CASP authorisation regime has applied since 30 December 2024, with the Central Bank of Ireland designated as the national competent authority on 8 November 2024. Existing Irish-registered VASPs are operating under a transitional/grandfathering window that ends 1 July 2026, by which date all crypto-asset service providers must hold a full MiCA CASP authorisation.

Framework: EU AI Act (Regulation (EU) 2024/1689), directly applicable in Ireland with phased application from 2 Feb 2025; national implementation via the Regulation of Artificial Intelligence Bill 2026 establishing Oifig IS na hÉireann (AI Office of Ireland) as central coordinator, with a distributed model of 15 national competent authorities.

As an EU member state, Ireland is governed by the directly applicable EU AI Act (Regulation (EU) 2024/1689), which is already in force with obligations phasing in through 2 August 2026 and beyond. Ireland has chosen a distributed enforcement model: the Regulation of Artificial Intelligence Bill 2026 (published 17 June 2026, progressing through the Oireachtas) establishes the AI Office of Ireland — Oifig IS na hÉireann — as the central coordinating authority and designates 15 existing sectoral regulators as national competent authorities. This regulatory architecture is complemented by the refreshed National AI Strategy 'AI — Here for Good' (July 2021, refreshed November 2024) and the successor Digital Ireland strategy to 2030.

Framework: EU General Data Protection Regulation (Regulation (EU) 2016/679) together with Ireland's Data Protection Act 2018 (which gives further effect to the GDPR and transposes the Law Enforcement Directive), supplemented by the ePrivacy Regulations 2011 (S.I. No. 336/2011). Enforced by the Data Protection Commission (DPC).

Ireland has a fully in-force, comprehensive personal-data protection regime built on the directly applicable EU GDPR and the national Data Protection Act 2018, which fills over 50 Member-State derogations and transposes the Law Enforcement Directive. Confidentiality of electronic communications, cookies and electronic direct marketing are separately governed by the ePrivacy Regulations 2011. The Data Protection Commission is the independent national supervisory authority and, because most major US tech firms locate their EU headquarters in Ireland, it functions as the GDPR one-stop-shop lead supervisory authority for many high-profile cross-border cases.

Framework: European Union (Payment Services) Regulations 2018 (S.I. No. 6 of 2018) transposing PSD2, and European Communities (Electronic Money) Regulations 2011 transposing EMD2; supervised by the Central Bank of Ireland (CBI) as the sole competent authority.

Ireland has a mature, EU-aligned licensing regime for digital payments and fintech. The Central Bank of Ireland authorises and supervises payment institutions (PIs), electronic money institutions (EMIs), and third-party providers (AISPs/PISPs) under the Payment Services Regulations 2018 and the E-Money Regulations 2011, alongside directly applicable EU regulations (SEPA/Instant Payments Regulation, MiCA, DORA). Sectoral rules also capture BNPL under the Consumer Protection Code, with EU CCD2 taking effect in November 2026.

Framework: Immigration Act 2004 and related permissions administered by Immigration Service Delivery (ISD, formerly INIS) under the Department of Justice; no dedicated digital-nomad visa exists.

Ireland has no dedicated digital-nomad or remote-work visa and there are no confirmed government plans to introduce one. Non-EEA remote workers rely on general immigration categories — most commonly a short-stay 'C' visitor visa (up to 90 days, no work permitted) or, for longer stays, Stamp 0 permission for persons of independent means, the Start-up Entrepreneur Programme (STEP), or an employment permit tied to an Irish employer. EU/EEA/Swiss nationals have unrestricted rights to live and work in Ireland under free-movement rules.

Framework: Online Safety and Media Regulation Act 2022 (OSMR Act) + binding Online Safety Code (Oct 2024, in force 21 Jul 2025) + Irish Digital Services Act 2024 implementing EU DSA, all overseen by Coimisiún na Meán (Media Commission); EU TCOR enforced jointly by Coimisiún na Meán and An Garda Síochána.

Ireland operates a comprehensive, in-force online safety regime. The OSMR Act 2022 established Coimisiún na Meán in March 2023 as regulator; it adopted a binding Online Safety Code for video-sharing platforms (VSPs) on 21 October 2024 which fully entered into force on 21 July 2025, and acts as Ireland's Digital Services Coordinator under the EU DSA (fully enforceable from 17 February 2024). The first formal Online Safety Code investigation opened against X on 8 September 2026, focused on age-assurance failures.

Framework: Current in-force framework is a patchwork: NIS1 Regulations (S.I. No. 360/2018) supervised by the National Cyber Security Centre (NCSC) and sectoral competent authorities, plus DORA for financial entities (S.I. No. 20/2025) supervised by the Central Bank of Ireland. A comprehensive NIS2 transposition — the National Cyber Security Bill 2024 — is still at General Scheme stage and expected to be enacted in 2026.

Ireland currently regulates cybersecurity through a sectoral patchwork anchored by the 2018 NIS1 Regulations (S.I. 360/2018) and sector-specific rules such as DORA for financial entities, with the NCSC acting as national CSIRT and lead competent authority. The NIS2 Directive transposition is delayed — the General Scheme of the National Cyber Security Bill 2024 was published on 30 August 2024, Ireland missed the EU's 17 October 2024 deadline and received a formal infringement notice from the European Commission, and the Bill is expected to be introduced to the Oireachtas in 2026. Until enactment, NIS1 obligations continue to apply, while NCSC has issued draft Risk Management Measures guidance (June 2025) to prepare in-scope entities for NIS2.

Framework: Companies Act 2014, administered by the Companies Registration Office (CRO) via the CORE online portal; Irish Naturalisation and Immigration Service (ISD) for non-EEA founder visas.

Ireland permits 100% foreign ownership of a private limited company (LTD), has no minimum share capital (€1), and lets founders incorporate online through CORE for a €50 fee, typically within 5–10 working days. The main friction for non-residents is the Section 137 requirement that at least one director be ordinarily resident in the EEA, which can be substituted with a ~€25,000 non-resident director bond. Non-EEA entrepreneurs who want to live and run the business in Ireland use the Start-up Entrepreneur Programme (STEP) requiring €50,000 of funding and an innovative, high-potential business plan.