Lauren Webb

Worked closely with a number of clients, including most notably clients in the charities, gambling and construction sectors on the implementation of GDPR, assisting with data mapping exercises, advising on compliance risks and producing key pieces of advice on significant areas, including marketing consents and international data transfers. Following that implementation she has continued to work closely with a number of clients on day to day compliance matters, advising on ad hoc data protection queries, the exercise of individual’s rights, privacy by design and data protection impact assessments, including relating to the introduction of new processes and technologies.

Experience advising a range of clients, including in the retail, charities and technology sectors on a issues relating to targeted advertising and digital marketing. She regularly advises on compliance issues relating to the use of cookies and similar technologies. She also advises on the use of social media and affiliates to undertake digital marketing activities. She has recently advised a client in the affiliate marketing sector on issues associated with getting consent to send electronic marketing communications to individuals on behalf of brands.

Advises clients internationally on GDPR compliance issues including relating to international data flows and the extra-territorial effect of the GDPR, including in light of Brexit. Recently she has advised a client in the manufacturing sector on the extra-territorial scope of the GDPR and associated compliance issues, in the context of a project to get compliant with both the California Consumer Privacy Act and the GDPR.

Advises on the exercise of individuals’ rights such as subject access request and erasure requests and has assisted a number of clients to defend their data processing activities to the ICO following complaints from individuals. She has had recent experience of liaising with the ICO on a clients’ response to a subject access request and confirming how a client’s use of personal data for surveillance purposes was undertaken in compliance with the law.

Regularly speaks at conferences and events on data protection issues including at the Browne Jacobson and Privacy Laws and Business conference ‘EU Data Protection Regulation – Time to get organised in the UK’, on the implications of data protection and Brexit, at a client’s conference in Denmark and at internal Browne Jacobson conferences and events. She also contributes to data protection publications, recently commenting on the implications of Data Protection and Brexit for Privacy Laws & Business.