Data protection and privacy

Practical, authoritative advice both local and international data protection and privacy frameworks as well as open (or smart) data laws, wherever your business operates.

Our data, privacy and cybersecurity group helps organisations of all sizes and sectors understand their obligations, build robust compliance frameworks, and respond effectively when challenges arise. We combine deep legal expertise with a practical, business-first approach, because compliance must be workable, not just technically correct.

How we can support you:

Reactive support: Where you are in the midst of a breach, a subject access request, a regulatory investigation or a crisis. We provide rapid response; and aim to leave you better informed and more prepared next time round. In short, we fight fires but also help build organisational resilience.
Proactive compliance and risk management: We support the fundamentals of effective data governance: whether that be assisting in records of processing activities (ROPAs), data privacy and AI impact or risk assessments, crafting data sharing and international data transfer agreements, policies, process and managing data retention or AI deployment.
Strategic and ambitious: We can help you protect, optimise and enable your data assets for strategic commercial advantage and unlock the value of data for shareholders, partners and their respective communities (whether in public or private sectors).

Whether you are building a compliance programme from scratch, dealing with a regulatory enquiry or navigating the complexities of international data transfers, our team is here to help. We work with clients across the UK, Ireland and internationally, from single-jurisdiction engagements to complex global programmes.

"They have excellent visibility in the market, with useful contacts and vast experience of working within our sector. They have also responded quickly to every request we have made."

Data centre operator

Advised on compliance, confidentiality and regulatory risks associated with audiovisual recording of MS Teams meetings and transcripts and developing appropriate AI usage and emerging technology policies.

Global technology provider

Advised on developing its data licensing model for licensing data to train its AI/machine learning model.

Financial services provider

Preparing a series of AI regulation and data privacy compliance and, separately related cybersecurity readiness training sessions for over 200+ staff.

Engineering business

Advised on devising a digital service transformation strategy to comply with EU AI and EU Data Acts, along with the UK Data (Use and Access) Act, as well as review licensing in derivative data and effective data governance and cybersecurity.

AI regulation and governance

Artificial intelligence

Cybersecurity

Data as an asset

Data, privacy and cybersecurity

Information law

Philip James

Partner

Jeanne Kelly

Founding Partner

Richard Nicholas

Partner

"Great service and lovely people. Never made to feel that I should know something when I don't!"

"They have excellent visibility in the market, with useful contacts and vast experience of working within our sector. They have also responded quickly to every request we have made."