Data protection for retail

Advising a FTSE retailer on the data protection implications of a major enterprise cloud hosting deal and advising on the data protection implications of numerous different technologies including cloud systems, apps, financial technologies, CRM systems etc.

Advising a global brand on cyber security following the hacking of its customer database. The advice covered compliance with UK, Irish and German data protection laws, engagement with regulators and law enforcement agencies, reputation management, communications with affected individuals and legal proceedings against its service provider.

Advising a UK retailer on data privacy and PCI-DSS compliance following a breach of security in its online payments platform. The advice included breach management support, regulatory advice and pursuing a third party service provider for breach of contract.

Advising a US on-line retailer on managing a data breach affecting consumers in multi-jurisdictions. This included advising on notification requirements breach notification requirements in multiple US states and jurisdictions across the globe following a breach of its online payment platform.

Advising Games Workshop in relation to a number of data protection and privacy issues including the implications of introducing CCTV into its stores worldwide and whether it is possible for Games Workshop’s International stores to carry out criminal record checks on employees in those countries and any relevant considerations in respect of that.

Advising Royal Mail Group on its data strategy including the use of Big Data and data monetisation.

Advising Sainsbury’s Supermarkets Limited on the operation of the Nectar loyalty scheme. The advice including data monetization, data sharing, direct marketing, the use of analytics and location data.

Advising Thorntons on a new ERP and CRM system, including the negotiation of agreements to improve Thornton’s position. We’ve also advised Thorntons on matters such as the creation of a website aimed at customisation and advised on all of the “back office” issues around that website and its integration with the CRM and ERP systems (which were from another provider).

Assisting a trade body to understand the impact of the GDPR on its industry.

Auditing an online retailer, headquartered in the US, following a breach of the security of its payment system. The breach impacted customers located in Europe, Asia-Pacific, North and South America.

Drafting a practical guide to the GDPR and its implications to the advertising industry for the Institute of Practitioners in Advertising for distribution to its membership.

Undertaking a data protection audit of an international parcel delivery business.

We advised Louis Vuitton on the data protection aspects of the creation and roll out of a paper and electronic customer information card (CIC). The CIC is to be used in various LVMH stores worldwide.

Working with Experian to understand its data flows, data maps and international data transfers.

Working with startups on new data driven products including crypto currencies.