
Ian Duffy
+353 1 920 2035
[email protected]
Ten Earlsfort Terrace
Dublin 2
D02 T380
Ireland
Ian is a partner in the Technology & Innovation Group.
Ian specialises in advising a wide range of domestic and international clients on outsourcing, digital transformation, cloud-related projects, commercial contracts, data protection, cyber security and information technology. Ian has significant experience in advising clients on complex and high value outsourcing and digital transformation projects. He is also particularly adept at advising financial institutions and other regulated firms on the convergence between technology, outsourcing and financial regulation. Ian also has extensive data protection experience and worked on some of the largest GDPR implementation projects in Europe. Ian regularly presents and publishes on outsourcing, digital transformation and data protection. Ian previously worked in the TMT Group of Linklaters LLP in London for several years.
Relevant Experience
- Leading the drafting and re-negotiation of a complex and business critical suite of outsourcing agreements for a global supplier of financial services
- Leading the drafting and negotiation of business critical outsourcings and IT contracts (including software licensing and SaaS contracts) for a leading domestic bank
- Leading the drafting and negotiation of high value cloud hosting and software development contracts for an Irish plc
- Advising one of the largest conglomerates in the world on their outsourcing arrangements, IT contracts and GDPR compliance
- Advising a number of leading Irish universities on their technology contracts and GDPR compliance
- Advising multiple clients on the development and implementation of complex and novel contractual structures to facilitate international data transfers in line with data protection rules (including BCRs and IGAs)
- Leading the drafting and negotiation of a range of financial services outsourcing agreements for a global investment bank
- Advising a global pharmaceutical company on the outsourcing of its group-wide telephony requirements to a global telco
- Advising on complex data migration and transitional services arrangements in relation to high value corporate transactions
- Advising a global food services company on contractual and data protection aspects of a cutting-edge arrangement for the operation of two fully autonomous convenience stores
Insights Blog

EU Consumer Protection – New Principles for Virtual Currencies in Video Games

DORA Register of Information - Achieving a Key Milestone

A Practitioner’s Guide to IT Outsourcing – A Review of Risk and Reliance

A Practitioner’s Guide to IT Outsourcing – When Things go Wrong

A Practitioner’s Guide to IT Outsourcing – The Complexities of Sub-Outsourcing

DORA Register of Information – The Final Stretch
Related Content

Part One: Harnessing the power of data under the Data Act

DORA: Who, What and When for Fund Managers

DORA Spotlight: Practical insights on the second batch of draft technical standards

Platform to Business Regulation: An overlooked forerunner to the Digital Services Package?

AI & Practical Legal Tips: Contracting Considerations in the Procurement of AI Solutions

Arthur Cox advises Cubic Telecom on Softbank investment in Cubic

Data and Digital Leadership Survey results launched

Processing Children’s Personal Data Correctly: Some Takeaways from the Data Protection Commission’s recent TikTok Decision

Fintech and New Technology Regulation

Arthur Cox advises Goodbody on the sale of Goodbody Fund Management Limited

Arthur Cox pleased to advise Apex Group on the acquisition of Bank of America Irish depositary business

AssuredPartners acquisition of O’Callaghan Insurances

Sean Mulryan investment in Modmo

Permanent TSB plc acquisition of elements of Ulster Bank business

Arthur Cox announces six new partners

ProAmpac acquisition of Irish Flexible Packaging and Fispak

Cool Planet Group acquisition of PowerHouse Generation

Flutter Entertainment plc sale of Oddschecker

MSD Animal Health Completes Acquisition of IdentiGEN

Ensuring cyber resilience for connected products

Digital Operational Resilience Act

Update on key EU operational resilience and cybersecurity legislative developments

The Data Protection Commission’s 2021 Annual Report

Arthur Cox contributes to impact assessment for the proposal for the EU Data Act

Central Bank of Ireland sharpens focus on operational resilience

New SCCs with wider application introduced by European Commission

Outsourcing: Registers and Outsourcing Policies – Key points from the Central Bank’s draft cross-industry guidance

Outsourcing: Contractual Requirements – Key points from the Central Bank’s draft cross-industry guidance

Outsourcing: Risk Assessments and Due Diligence – Key points from the Central Bank’s draft cross-industry guidance

EU Developments in AI Regulation

Outsourcing: Governance and Monitoring – Key points from the Central Bank’s draft cross-industry guidance

Outsourcing: Central Bank consults on draft cross-industry guidance for regulated firms

The Data Protection Commission’s 2020 Annual Report at a Glance

Digital transformation – addressing legal and compliance challenges

Overview of certain key considerations for limitation of liability clauses in B2B contracts

EU-UK Trade and Cooperation Agreement defers application of UK’s status as a ‘third country’ under GDPR

Digital operational resilience – proposed EU legislation heralds significant change for financial entities and ICT service providers

New EU Rules for the Free-Flow of Non-Personal Data on the Horizon
