We use cookies to collect and analyse information on site performance and usage to improve and customise your experience, where applicable. View our Cookies Policy. Click Accept and continue to use our website or Manage to review and update your preferences.

‘Crucial clarity’ on data damages – BWS
Mr Justice Brian Murray Pic: RollingNews.ie

28 Jul 2025 data law Print

‘Crucial clarity’ on data damages – BWS

Lawyers at Byrne Wallace Shields say that a recent Supreme Court judgment has provided crucial clarity for practitioners, insurers, and claimants in cases involving data breaches. 

The court ruled that, in litigation arising from data breaches, “distress, upset, and anxiety” do not constitute personal-injuries claims. 

In a note on the firm’s website, the firm's lawyers say that the judgment will shape the future litigation of claims resulting from data breaches. 

PIAB authorisation 

In Dillon v Irish Life Assurance PLC, the plaintiff brought a case against Irish Life Assurance claiming compensation for “distress, upset, anxiety, inconvenience, loss, and damage” resulting from six data breaches over a 12-year period. 

He did not, however, seek authorisation from PIAB (now the Injuries Resolution Board), which is required before beginning an action seeking compensation for personal injuries. 

The Circuit Court dismissed the case, and the High Court upheld its decision. The Supreme Court, however, allowed the appeal, overturning the two previous court rulings. 

‘Procedural certainty’ 

The Byrne Wallace Shields (BWS) lawyers note that the Supreme Court found that: 

  • The claim did not fall under the PIAB regime,
  • Emotional distress without psychiatric injury is not a ‘personal injury’ under the Personal Injuries Assessment Board Act 2003, and
  • Therefore, the plaintiff was not required to obtain PIAB authorisation. 

The firm says that the ruling clarifies that claims solely for emotional harm (apart from recognised and diagnosable psychiatric injury) are now “definitively outside the PIAB framework”. 

“Future claims for emotional distress, in the context of data breaches, now have procedural certainty for proceeding through the courts,” the lawyers state. 

They note, however, Mr Justice Brian Murray’s comment that, where plaintiffs’ claims are solely for mental distress, upset, and anxiety, they will fall outside the PIAB regime, “but they cannot expect anything other than very, very modest awards”. 

Gazette Desk
Gazette.ie is the daily legal news site of the Law Society of Ireland

Copyright © 2025 Law Society Gazette. The Law Society is not responsible for the content of external sites – see our Privacy Policy.