Law Enforcement Protocols

1. How to submit a request

Law enforcement and other public authorities should submit requests in writing, on official letterhead or from an official email address, to [email protected]. Please mark the subject line clearly (for example, “Law enforcement request”). This is our general contact address and is not a dedicated law enforcement channel.

2. Information a request should include

• The identity of the requesting authority and the individual making the request, with verifiable official contact details.
• The legal basis for the request (for example, the specific statute, court order, warrant or other legal instrument relied upon).
• The jurisdiction and the offence or matter under investigation.
• The specific data, records or assistance sought, and the account, profile or period concerned.
• Why the information is necessary and proportionate to the stated purpose.
• Any applicable deadline, and whether the request is urgent (with reasons).

3. How we review requests

Each request is reviewed on its individual facts. Where appropriate we will:

• verify the identity, authenticity and authority of the requester and the legal basis relied upon;
• assess jurisdiction, legal validity, relevance, scope, necessity and proportionality;
• seek clarification or ask the authority to narrow an overbroad or unclear request;
• escalate uncertain, overbroad, sensitive or novel requests for legal review before responding;
• disclose only the information that is legally required or otherwise lawfully permitted, and only that which is necessary and proportionate.

We may decline, in whole or in part, to disclose information where the request is not properly authorised, is unlawful, is overbroad, or falls outside the applicable legal framework.

4. Data protection and lawful disclosure

Where we handle personal data, we do so in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. Depending on the circumstances, disclosure to a public authority may be based on a legal obligation, a legal claim, the prevention or detection of crime, or another lawful basis. We retain discretion to require a legally binding order before disclosing certain categories of data.

5. Preserving records

We will only preserve records or data where we are satisfied it is legally justified, and only to the extent and for as long as is necessary and proportionate in the circumstances. We cannot guarantee preservation of data that we do not hold, or that has already been deleted in line with our normal retention practices.

6. Recordkeeping and access controls

Where appropriate, we record the receipt of requests, our decisions, any disclosures made and the legal basis relied upon. Access to such records and to user data is limited to those who need it for this purpose.

7. Emergency requests

We do not operate a dedicated emergency response service or a 24-hour line. Genuine emergency requests involving an imminent risk of serious harm to a person’s life or safety should be made through our contact address above, clearly marked as urgent, and should set out the nature of the emergency and the legal basis relied upon. We will consider such requests as promptly as we reasonably can, and any response will depend on the lawfulness of the request and our ability to verify the requester.

8. Notifying affected users

Where we disclose data in response to a lawful request, we may notify the affected member where we consider it appropriate and permitted to do so. We may choose not to notify a member where the law prohibits or restricts notification, where doing so would prejudice an investigation, or in other lawful circumstances. We do not notify every member in every case.

9. Contact

Written requests should be sent to [email protected]. For general (non-law-enforcement) questions, please see our contact page or legal information.