Data notes
Subscribe to our blog
Our data protection and privacy offering is driven by an interdisciplinary global team with extensive experience spanning regulatory advice, commercial transactions, litigation and compliance. Our practice covers the full range of data protection and management, privacy and associated matters, providing you with cutting-edge advice on general compliance including regulatory compliance, risk disclosure and corporate governance, subject access requests, employee monitoring and surveillance, freedom of information, privacy impact assessments, cyber security, data breaches and post-breach recovery, incident response, data retention, data monetisation and global data transfers.
We have been involved in drafting legislation, formulating regulation and advising in the area since its inception, with some team members also holding senior government positions. Our clients are diverse, ranging from advising startups to multinational businesses and major listed corporations, as well as corporate executives and boards of directors, with clients turning to us for contentious and non-contentious advice.
We regularly advise on major data laws and regimes including the EU and UK’s General Data Protection Regulation, the Australian Privacy Act and surveillance legislation, comprehensive state privacy laws including the California Consumer Privacy Act, industry-specific data protection laws including in finance, insurance, critical infrastructure, advertising and healthcare, and the privacy acts of a number of countries across the broader APAC region.
Drawing on deep knowledge from experience spanning various sectors – including public and private – we offer strategic, pragmatic advice to help you achieve your commercial objectives, maximise data value and minimise risk, while navigating the complex, changing landscape of global data regulations.
Advising companies on claims brought by individuals under the Data Protection Act 1998 for unlawful processing of personal data. Provided advise on pre-employment checks, subject access requests and BYOD policy terms of use
Advising on data protection practices, across Europe, including undertaking a full review of its procedures and documentation as part of a project to prepare for implementation of the GDPR
Advising clients on their response to subject access requests from employees/agency staff, preparing a revised protocol for responding to subject access requests compliant with the GDPR, advice regarding providing personal data to the authorities and profiling of financial services clients' employees to identify potential flags for inappropriate behaviour
Advising clients on processing sensitive personal data, the employment-related data protection aspects of an investigation and monitoring of employees' emails and transferring and processing of employee data of hundreds of thousands of employees in the context of litigation across jurisdictions
Advising on data protection advice in the context of provision of information to the Goddard/Jay Inquiry investigating institutional failings in relation to child sexual abuse
Advising on monitoring of employee emails, transfers of employee data (including outside the EEA) and responding to subject access requests from customers (including the use of various exemptions)
Partner, London
Partner, Melbourne
Special Counsel, Privacy Counsel, Silicon Valley
Partner, Kewei, Mainland China and Beijing
Partner, Paris
Counsel, New York
Special Counsel, Melbourne