Anne-Marie is a partner and Head of the Technology and Innovation Group at Matheson.
Anne-Marie Bohan has extensive experience in technology related legal matters, gained over nearly three decades with Matheson, and is Head of Matheson’s Technology and Innovation Group. Anne-Marie is widely recognised for her skill in bringing together significant practical experience in advising on technology and privacy legal issues with industry knowledge and an understanding of applicable regulatory rules and regulatory requirements.
Anne-Marie is recognised by The Legal 500 as a Leading Partner for both Information Technology and Fintech, and is in The Legal 500 Data Privacy and Data Protection Hall of Fame.
Experience and Education
Anne-Marie has advised:
- On Digital Market Act compliance and strategy including contractual and privacy impacts on existing and proposed products.
- On the EU AI Act and the roll out of AI products, including related DPIAs and contracts.
- On contract management strategies under the EU Sanctions regime.
In relation to IT and BPO outsourcings for financial services and corporate clients, both intra-group and on a third party basis. - On the outsourcing regulatory requirements and contractual issues for fund administration and depositary companies.
- A pillar bank on the GDPR and privacy aspects of the acquisition of a major portfolio of accounts and customers.
- On NIS2 and DORA requirements and impacts for covered entities and their service providers.
- On a number of signifcant cyber security incidents, including regulatory, customer and data subject notification requirements and incident management strategies.
- A major multinational IT services company on the outsourcing of it by one of Ireland’s largest financial institutions of its IT infrastructure services.
- On a significant smart money card product, including in relation to the underlying technology contracts.
- A major credit institution the establishment, structuring of and contracts for electronic wallet and electronic money products, including anti-money laundering, passporting, distance selling, unfair contract terms and data protection issues.
- On the provision of on-line financial services and systems, covering systems that are customer-facing as well as those facilitating interaction with intermediaries, including issues arising under electronic commerce and distance selling regulations.
- On the procurement and implementation of IT systems and services for financial services, corporate and public sector clients.
- On GDPR implementation and compliance projects, addressing all aspects of GDPR, including consent issues, marketing, data protection officers, privacy impact assessments, international data transfers and lead supervisory authority queries.
- In relation to data protection policies related to collection and processing of customer data, including drafting of data protection notices and scripts and policies on intra-group sharing of information, and on direct marketing issues.
- On centralised databases of employee and customer personal data, including advices in respect of transfer outside the EEA.
- On data subject access requests, including in the context of contentious situations.
- Trinity College Dublin (LLB)

