Data Protection and Privacy

Our international data protection and privacy practice spans the globe advising within the Asset Management & Investment Funds, Financial Institutions, TMT and Healthcare & Life Sciences sectors. Our lawyers advise on best practice and industry norms in approaching data protection compliance, in addition to the law.

Data protection and privacy issues impact all business and industry sectors. Compliance with the law and protecting individuals’ privacy is not just a legal issue. Failure to respect people’s privacy or ensure security of their data can severely damage a company’s brand and influence consumer buying decisions. It is also an area for increased sector regulatory focus, particularly in the financial services market.

"The team supports clients throughout the GDPR process and provides a business-focused and pragmatic approach."

We work with our clients across the full range of data protection and privacy issues.

• data security - advising both on proactive measures to be adopted by business to address data security and dealing with the response to data security breaches;
• employees - the full range of data protection issues arising for employers including monitoring at work and processing of sensitive personal data;
• freedom of information - advising both public and private sector bodies on disclosure requirements and risks under freedom of information/open government legislation;
• interception of communications - advising businesses on compliant monitoring and recording of communications to, from and within their business;
• subject access - advise on developing strategies for responding to subject access requests as well as assisting in dealing with the requests themselves, sometimes also in the context of litigation;
• transactions - dealing with data protection issues associated with corporate transactions (eg in relation to due diligence disclosure or transfer of data as an asset) and outsourcing transactions; and
• marketing - advising on the rules relating to telephone, email and SMS marketing as well as data profiling activities.