The article analyses the role of Ireland’s Data Protection Commission as a data protection authority, within a context defined by the concentration of major technology companies in the country. It examines the Commission’s evolution, institutional limitations, and criticisms, as well as the tensions between its regulatory function and Ireland’s economic environment. In light of new regulations such as the Digital Services Act and the Artificial Intelligence Act, the article warns of the potential replication of the weaknesses of the General Data Protection Regulation’s One-Stop-Shop mechanism. It proposes structural reforms aimed at ensuring a more equitable, consistent, and effective enforcement of digital law in the European Union, as it seeks to reclaim its digital sovereignty.