Skip to content

Anne-Marie is a partner and Head of the Technology and Innovation Group at Matheson.

Anne-Marie Bohan has extensive experience in technology related legal matters, gained over nearly three decades with Matheson, and is Head of Matheson’s Technology and Innovation Group. Anne-Marie is widely recognised for her skill in bringing together significant practical experience in advising on technology and privacy legal issues with industry knowledge and an understanding of applicable regulatory rules and regulatory requirements.

Anne-Marie is recognised by The Legal 500 as a Leading Partner for both Information Technology and Fintech, and is in The Legal 500 Data Privacy and Data Protection Hall of Fame.

She advises on all aspects of technology and e-commerce law, as well as outsourcings and contracted services, with particular focus on the requirements of financial institutions and financial services providers in these areas.  She advises clients on major strategic projects which involve multiple regulations and regulators, including in particular providing DMA, GPDR, the AI Act, NIS2 and DORA advices, advising in the context of client interactions with the Data Protection Commission, the Central Bank of Ireland, the Competition and Consumer Protection Commission, and the European Commission.

Anne-Marie’s practice includes advising a broad range of clients on data protection, privacy and cybersecurity issues, including employee data protection issues, data subject access requests and security breach incidents.

She has lectured on IT, data protection and financial services in the Law Society of Ireland, the National University of Ireland Maynooth, the UCD Smurfit School Executive Development Programme and more broadly.

Experience and Education

Anne-Marie has advised:

  • On Digital Market Act compliance and strategy including contractual and privacy impacts on existing and proposed products.
  • On the EU AI Act and the roll out of AI products, including related DPIAs and contracts.
  • On contract management strategies under the EU Sanctions regime.
    In relation to IT and BPO outsourcings for financial services and corporate clients, both intra-group and on a third party basis.
  • On the outsourcing regulatory requirements and contractual issues for fund administration and depositary companies.
  • A pillar bank on the GDPR and privacy aspects of the acquisition of a major portfolio of accounts and customers.
  • On NIS2 and DORA requirements and impacts for covered entities and their service providers.
  • On a number of signifcant cyber security incidents, including regulatory, customer and data subject notification requirements and incident management strategies.
  • A major multinational IT services company on the outsourcing of it by one of Ireland’s largest financial institutions of its IT infrastructure services.
  • On a significant smart money card product, including in relation to the underlying technology contracts.
  • A major credit institution the establishment, structuring of and contracts for electronic wallet and electronic money products, including anti-money laundering, passporting, distance selling, unfair contract terms and data protection issues.
  • On the provision of on-line financial services and systems, covering systems that are customer-facing as well as those facilitating interaction with intermediaries, including issues arising under electronic commerce and distance selling regulations.
  • On the procurement and implementation of IT systems and services for financial services, corporate and public sector clients.
  • On GDPR implementation and compliance projects, addressing all aspects of GDPR, including consent issues, marketing, data protection officers, privacy impact assessments, international data transfers and lead supervisory authority queries.
  • In relation to data protection policies related to collection and processing of customer data, including drafting of data protection notices and scripts and policies on intra-group sharing of information, and on direct marketing issues.
  • On centralised databases of employee and customer personal data, including advices in respect of transfer outside the EEA.
  • On data subject access requests, including in the context of contentious situations.
  • Trinity College Dublin (LLB)

News and Insights

Insights
09/09/2025

The Representative Actions Directive and the Rise of Artificial Intelligence

Read More
Insights
25/08/2025

Consumer Representative Actions – Third Irish “Qualified Entity” Designated

Read More
Insights
25/06/2025

DPC Publishes Annual Report for 2024

Read More
Insights
20/06/2025

UK’s Data (Use and Access) Bill Passes the Lords Despite AI Concerns

Read More
Insights
28/02/2025

EU Commission publishes Guidelines on definition of an “AI system”

Read More
Insights
13/02/2025

EDPB publishes eagerly anticipated Opinion on AI models

Read More
Insights
10/02/2025

DPC Imposes Significant GDPR Fine on LinkedIn

Read More
Insights
09/02/2025

DPC Adopts Broad Interpretation of Definition of “Personal Data Breach”

Read More
Insights
13/12/2024

EU Cyber Resilience Act Comes Into Force

Read More
Insights
06/12/2024

EDPB Publishes Draft Guidelines on Legitimate Interests

Read More

Accolades

Anne-Marie Bohan is named a leading individual.

 

Information Technology: The European Legal 500

2024

© 2025 Matheson LLP | All Rights Reserved