Meet Morgane Nerrou, Legal Analyst in the Data Protection Commission

The Role

A Legal Analyst has a key role in what is one of Europe’s most prominent and active data protection regulators, with opportunities to contribute to the DPC’s extensive work at national level, as well as the high-profile and unique role it holds in the supervision of large international organisations based in Ireland. The role, equivalent to that of a legal researcher, involves legal research and analysis and the provision of legal support across a broad range of the DPC’s activities. As a result, Legal Analysts are involved in a diverse array of substantive data protection issues as well as novel legal and regulatory matters.

Morgane Nerrou

I joined the DPC in December 2024 as a Legal Analyst on the Inter-Regulatory Affairs Team. The unit’s objective is to build and manage strategic relationships with other regulatory authorities in Ireland and internationally, ensuring personal data protection is respected across digital regulation. My day-to-day work is varied, but it primarily involves conducting legal research. I conduct legal research to solve practical regulatory issues and contribute to the drafting of legal and policy documents. For instance, I prepare briefing notes for conferences and speaking events; analyse data protection law to help respond to complaints; and prepare extended analyses of European and national legislation to identify and understand their overlaps with data protection laws. My role also involves working with other organisations at both national and European level.

I have a background in law, holding a French law degree, a Masters in European studies and an MPhil in EU Law and Governance from French and Irish universities. Before joining the DPC, I worked as a Legal Researcher at the Law Reform Commission and at the Director of Public Prosecutions Office.

I applied for the Legal Analyst role because I saw the varied backgrounds represented at the DPC and the diversity of work done at the DPC. It is an exciting place to work, especially since the DPC plays a key role in enforcing data protection law. It is also a supportive and professional workplace where you can grow your career.

My day-to-day work is quite varied; there no is typical day!  The common theme of my day-to-day work is conducting legal research to understand how the suite of digital legislation interacts with the GDPR and other data protection legislation.  The context in which this legal research is used varies but cuts across interesting and novel legal issues.

The variety of work and the chance to build strong legal knowledge have been the most rewarding aspect of my role in the DPC. The Legal Analyst role is a great opportunity to apply my legal research expertise and grow new skills in a fast-evolving area that is highly relevant in today’s world. Data protection law affects nearly every areas of law and shapes everyday life especially within the growing digital sphere.

This role gives me valuable exposure to both EU law and Irish administrative law. I get to see how EU legal principles operates in practical cases, especially in complex areas where data protection overlaps with other digital policy frameworks. At the same time, I engage with administrative procedures as the DPC is a national regulatory authority. This involves understanding how Irish public bodies makes decisions and cooperate with other regulators. So, it is a unique opportunity to see how EU law is implemented at the national level and how both systems interact.