Data Privacy
Advising a broad range of clients across the world on all aspects of data privacy and management of data risk.
As data is increasingly seen as a valuable yet vulnerable asset, our expert global Data Privacy team delivers strategic, pragmatic and commercial advice that supports the management of data risk against a fast-moving regulatory backdrop.
We support our clients on all aspects of data privacy risks across the world, including data governance, monetisation strategies, implications of AI and the design of new digital products and services. This includes more contentious work, including complex DSARs, data breaches, regulatory enforcement and privacy based claims as well as where data privacy is used as a tool in wider commercial, employment or regulatory disputes and investigations.
We are at the forefront of legal developments in the UK, Europe and beyond through our network of industry experts, regulator contacts and relationship firms around the world. Our Data Privacy team sits within our wider Tech stream and work seamlessly across the scope of the evolving digital water-front, collaborating with our other expert hubs, including cyber and digital regulation, with cross membership between these other hubs to enable us to provide joined up and pragmatic advice where relevant.
Key experience
We advised a financial services group on a global data breach affecting 500,000 customers, involving regulatory enforcement action. This included providing guidance on worldwide notifications and potential exposure in over 60 jurisdictions in a very short period of time and managing all the different workstreams effectively (including, among others, data privacy, employment, financial regulation, criminal and civil liabilities, contracts, and liaising with the police and other regulators).
We assisted with a company-wide review of the data protection and privacy obligations of a global corporation with interests in telecommunications, media, IT solutions, property development and investment. The review related to various of its products and internal/external operations and covered the EU, Hong Kong and China.
We advised an insurer on the use of anonymised, pseudonymised and other personal data, including special category data and criminal conviction data, in a data analytics project. This involved structuring the process to incorporate appropriate anonymization and pseudonymisation techniques.
We advised a tech company on the formulation and development of a new customer journey, including functionality for data capture and categorisation for profiling and marketing.
We advised a FTSE 100 client on a tactical and contentious DSAR from a senior executive following their dismissal.
Key Contacts
