The author is Assistant Professor in Information Technology Law at Trinity College Dublin, Ireland. For correspondence: <maria-grazia.porcedda@tcd.ie>. The author wishes to express her gratitude to Dr David Fennelly for the helpful comments and Ms Kate Heffernan for research assistance. All errors are the author’s. All links were last accessed in August 2020. The law is correct as stated as of August 2020. The report was prepared in connection with the Covid-19 Law and Human Rights Observatory directed by Prof. Oran Doyle and funded by Trinity College Dublin COVID Response Fund <https://www.tcd.ie/law/tricon/covidobservatory/index.php#about>). A review of measures adopted between September 2020 and June 2021 is due to appear within the data protection report to be published by Trinity College Dublin’s Covid-19 Law and Human Rights Observatory <https://www.tcd.ie/law/tricon/covidobservatory/publications/index.php#reports>. An analysis of data-driven measures in light of data protection as a fundamental right is pending for publication as part of the Northern Ireland Legal Quarterly Special Issue 'COVID-19 and Legal Responses on the Island of Ireland' edited by Ollie Bartlett, Neil Maddox, Ronagh McQuigg and Andrea Mulligan (publication expected in 2022).