Minister Jim O’Callaghan announces appointment of a third Commissioner for Data Protection following Cabinet approval
- Published on: 17 September 2025
- Last updated on: 26 September 2025
The Minister for Justice, Home Affairs and Migration, Jim O'Callaghan, has today announced that the government has appointed a new Commissioner for Data Protection, Ms Niamh Sweeney. Her appointment will take effect from 13 October 2025, for a five-year term.
This follows the appointment of two new Commissioners for Data Protection, Dr. Des Hogan and Mr. Dale Sunderland in February 2024.
In 2022, the government approved commencement of a process to increase the number of commissioners. A review was undertaken by the Department of Justice which took account of the evolving organisational structure, governance and business needs of the Data Protection Commission (DPC). Today’s appointment completes the process to expand the number of commissioners to three.
Wishing Ms Sweeney well in her new role, Minister O’ Callaghan said:
“The Data Protection Commission (DPC) has grown significantly in size, scope and responsibility over the last decade, playing a critical role as one of the largest EU data protection authorities.
“The DPC continues to have expanding and evolving responsibilities as the national independent authority in Ireland responsible for upholding the fundamental right of individuals in the European Union to have their personal data protected.
“From 2026, the DPC will assume significant market surveillance authority responsibilities in relation to certain high-risk AI systems including law enforcement and certain biometrics. The AI Act expressly provides for certain roles for the DPC.
“The DPC is anticipating an increased workload arising from the impact of the EU’s new digital Acts such as the Digital Markets Act, Data Act, and Digital Services Act on data protection matters.
“These additional functions are critical to Ireland’s ability to maintain its leading role in the development and regulation of Europe’s digital economy.
“As the responsibilities and scope of the DPC continue to grow, I am pleased that three commissioners will now lead and manage this key regulatory body.”
Notes
Biographical information
Niamh Sweeney has over 20 years’ cross-sectoral experience spanning technology, public service and media. Most recently, she was a Director with a global strategic advisory firm having previously held senior roles at a number of technology companies, including as Director of Public Policy for Europe, the Middle East and Africa at WhatsApp.
Prior to entering the technology sector, she was a Special Adviser at the Department of Foreign Affairs and Trade and worked as a journalist for many years, including at the national broadcaster RTÉ.
Ms. Sweeney holds a BA in European Studies from Trinity College Dublin and is a two-time graduate of Columbia University in New York.
Data Protection Commission
The Data Protection Commission (DPC) plays a critical role as one of the largest EU data protection authorities.
As the lead supervisory authority in many cross-border cases, Ireland is generally the first point of response for new and emerging data protection issues across the EU.
From the GDPR coming into force in May 2018 to the end of 2024, the DPC has issued over €3.5 billion in fines, has received 43,934 breach notifications, and has processed and concluded 98% of these notifications.
Additionally, in this period, the DPC has received 1,853 GDPR cross-border complaints, of which 1,612 were handled in their capacity as lead supervisory authority.
The delivery of effective data protection regulation is an important policy objective of Government. The Programme for Government provides that the government will “Invest in the Data Protection Commission to ensure it can deliver on its mandate”. It further provides that the government will “invest to make Ireland an EU centre of expertise for digital and data regulation and being a regulatory hub for companies operating across the EU Digital Single Market”.