The Data Protection Act 2018 entered into force on 25 May 2018. The Act gives effect to the limited areas of flexibility permitted under the General Data Protection Regulation (GDPR), transposes the law enforcement Directive into Irish law, replaces the Data Protection Commissioner with the Data Protection Commission and provides for consequential amendments to various Acts that contain references to the Data Protection Acts 1988 and 2003. A limited number of the Act’s provisions have not been commenced to-date.