The verdict in three sentences
A Dublin law firm website handles some of the most sensitive enquiries on the web, so your provider must deliver a real privacy notice, a cookie banner that meets the Data Protection Commission's guidance and enquiry forms that collect only what a first conflict check needs. On accessibility, ask for WCAG 2.1 AA as a contractual target (WCAG 2.2 AA if budget allows), an accessibility statement and an audit report before launch. All of this fits within a fixed budget of €2,700 to €8,200 if it is written into the scope from day one rather than bolted on later.
What should a law firm require on data protection?
Under the GDPR and Ireland's Data Protection Act 2018, with the Data Protection Commission (DPC) as regulator, your firm is the controller and your web provider is usually a processor. That means the provider must work under a written processing agreement and follow your instructions. Here is the practical list to put in the brief.
| Requirement | What to ask the provider | Why it matters for a solicitor |
|---|---|---|
| Privacy notice | Plain-language page listing purposes, lawful bases, retention, rights | Enquirers often share facts about disputes, health or family matters |
| Cookie consent | Reject button as visible as Accept, no pre-ticked boxes, no analytics before consent | DPC guidance on cookies is explicit about equal choice |
| Enquiry form | Minimal fields: name, contact, other party name, short summary | Enables a conflict check without collecting the whole case |
| Confidentiality warning | Notice that submitting a form does not create a solicitor-client relationship | Avoids misunderstandings about privilege and retainer |
| Hosting location | EU hosting, sub-processors listed | Keeps transfers outside the EEA under control |
| Form data routing | Encrypted delivery to a monitored inbox, no copies left in plugins | Reduces exposure if the CMS is compromised |
| Backups and logs | Daily backups, 30 day retention, admin access logged | Supports breach investigation within the 72 hour notification window |
| Processing agreement | Article 28 GDPR terms signed with the provider | Legal requirement when a processor handles personal data |
Your marketing copy also has its own frame. Advertising by solicitors in Ireland is regulated, with the Law Society of Ireland and the Legal Services Regulatory Authority setting rules, including well known restrictions on advertising personal injury services. Stay general on the site, avoid promises of outcomes and have a partner sign off every practice area page. Cookies are also covered by Ireland's ePrivacy Regulations 2011. This is not legal advice.
What should you require on accessibility?
Accessibility is both a client care issue (older clients, people with disabilities in personal or employment matters) and a quality signal. The European Accessibility Act has applied since June 2025 to specific consumer services such as e-commerce and banking; a firm's informational site is not automatically in scope, but WCAG 2.1 AA, the standard referenced by EN 301 549, is the sensible benchmark to contract on.
| Accessibility item | Concrete deliverable | Typical effort |
|---|---|---|
| Colour contrast | 4.5:1 minimum for body text | Built into the design system |
| Keyboard navigation | Every menu, form and accordion usable without a mouse | Tested on every template |
| Form labels and errors | Visible labels, clear error messages, no colour-only cues | Included in form build |
| Alt text and documents | Alt text on images, accessible PDFs for guides | Half a day per 10 documents |
| Accessibility statement | Page stating the target, known gaps, contact route | 1 to 2 hours |
| Audit before launch | Automated scan plus manual checks on key pages | 1 to 2 days |
What does it cost in Dublin, and what does Kolonell include?
| Option | 2026 ballpark | Privacy and accessibility scope |
|---|---|---|
| Dublin agency, small firm site | €8,000 to €18,000 | Usually included, audit sometimes extra |
| Dublin agency, mid-size firm site | €18,000 to €40,000 | Full audit, multilingual options |
| Freelancer | €2,500 to €6,000 | Varies widely, often a cookie plugin only |
| Kolonell Starter | €2,700 | Privacy notice structure, consent banner, AA design targets |
| Kolonell Growth | €4,500 | Plus qualified intake form, accessibility statement |
| Kolonell Premium | €8,200 | Plus pre-launch audit report and second language |
| Standalone accessibility audit | €1,000 to €4,000 | Report only, fixes extra |
Local ranges are a 2026 ballpark based on typical Dublin agency quotes and public rate pages. Kolonell plans include a project manager reachable on Irish hours, native English copywriting, delivery in 3 to 4 weeks and 3 months of support. You can see every plan on the international website offer.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Illustrative example. Ciarán, managing partner of a seven-solicitor employment and family law practice on Baggot Street, receives 40 web enquiries a month. His current form asks for a full case description and stores copies in a plugin database for years. He moves to a Growth plan at €4,500 plus a €1,500 external audit. The new form asks only five fields, so the time spent reading each enquiry drops from about 12 to 5 minutes: 40 × 7 = 280 minutes saved per month, close to 56 hours a year. At an internal cost of €90 per hour, that is about €5,040 a year, more than the build itself.
FAQ
Do we need a cookie banner if we only use analytics?
Yes, analytics cookies are non-essential and need consent first under Irish rules and DPC guidance. A compliant banner adds roughly half a day to the build.
Should the enquiry form ask for case details?
Ask only what a conflict check needs: names, the other party and a short summary of up to 500 characters. Full documents should go through a secure channel once the firm accepts the matter.
Is WCAG 2.2 required instead of 2.1?
WCAG 2.1 AA remains the reference in EN 301 549, but 2.2 AA adds nine success criteria such as larger touch targets. Targeting 2.2 adds typically 5 to 10% to design and testing time.
Where should the site be hosted?
EU hosting is the simplest choice for a Dublin firm, with every sub-processor listed in the agreement. Daily backups kept for 30 days are a reasonable baseline.
Can our client portal be linked from the website?
Yes, a secure link to your existing portal is part of a standard build and takes under a day. A custom client portal is a separate application, priced on quote.
Let's scope your project. A Dublin law firm site with GDPR-ready intake, DPC-compliant consent and a WCAG 2.1 AA target, from €2,700 to €8,200, delivered in 3 to 4 weeks. See the international offer or request a free quote: detailed reply within 48 hours.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
