Deepfake Law in Ireland

Ireland's regulatory significance for deepfakes is outsized because most major US tech platforms (Meta, Google, TikTok, X, LinkedIn) have their EU headquarters in Dublin, making Ireland the lead GDPR and AI Act supervisor for EU-wide complaints against those platforms.

Key provisions

EU AI Act. Directly applicable. Ireland's data protection commission (DPC) and a designated AI regulator are the competent authorities.

Harassment, Harmful Communications and Related Offences Act 2020 ("Coco's Law"). Criminalizes non-consensual intimate imagery, including AI-generated. Named after Nicole "Coco" Fox Fenlon, who died by suicide after online harassment. Penalties up to seven years for distribution and creation offenses. One of the earliest dedicated deepfake-adjacent statutes in the EU.

Criminal Justice (Incitement to Violence or Hatred and Hate Offences) Act 2024. Includes provisions covering hate-motivated deepfake content.

GDPR (as implemented). The Irish DPC's decisions on platforms frequently have EU-wide reach, making Ireland a focal jurisdiction for deepfake enforcement against major platforms.

DPC enforcement

The DPC has been reshaped through reform but remains central:

• Lead supervisor for Meta, Google, TikTok, LinkedIn under GDPR.
• Co-designated AI Act lead for those platforms in Ireland.
• Cross-border cooperation mechanism (One-Stop-Shop) magnifies Irish decisions across the EU.

Practical implications

For organizations operating in Ireland:

• Platforms headquartered in Ireland: high regulatory visibility. DPC decisions set EU-wide precedents.
• Creators of deepfake content: Coco's Law prosecutions are active. Non-consensual imagery is a serious criminal matter.
• Enterprises: strong GDPR enforcement culture combined with AI Act makes Ireland predictable but consequential.

Related reading

• EU deepfake laws
• UK deepfake laws
• Germany deepfake laws