Alexander
Brown

Alexander Brown is a partner in the Digital Business practice and Head of the firm's Technology, Media & Telecommunications (TMT) sector. He advises technology companies, telecommunications providers, financial institutions and other digitally driven businesses on data protection, artificial intelligence, technology transactions, outsourcing and digital regulation.
 
Clients seek Alexander's advice on some of their most significant technology and data-related challenges, including AI adoption, cyber incidents, major outsourcing programmes, cloud transformation projects and the development of global privacy frameworks. He is particularly known for helping organisations navigate issues that sit at the intersection of technology, regulation and commercial strategy, translating complex legal and regulatory requirements into clear, practical advice.
 
His practice combines deep experience in data protection, cyber security, digital regulation and commercial technology transactions, enabling him to support clients throughout the lifecycle of a project, from strategic planning and governance through to implementation, crisis management and regulatory engagement.  

AI adoption and responsible innovation

 
Alexander helps organisations understand how the UK GDPR, EU GDPR and EU AI Act operate in practice, from AI model training and governance frameworks to privacy risk management and regulatory compliance. He also works with business leaders and in-house legal teams on the wider strategic implications of AI and how organisations can adopt emerging technologies responsibly while maintaining trust and regulatory compliance. His work often involves helping clients navigate overlapping and evolving regulatory frameworks to support AI adoption and innovation.
 
He is also the partner that has led on the development and delivery of Simmons & Simmons’ AI strategy which gives Alexander a wealth of practical insight into the legal, commercial and technical opportunities and challenges that arise from the deployment of AI enabled technologies and working practices in a business.  

Data protection and digital regulation

 
Data protection is a cornerstone of Alexander's practice. He advises multinational organisations on the design, implementation and enhancement of GDPR compliance programmes, including privacy governance, data protection impact assessments, implementation of novel technology and data processing activities, international data transfers and the management of data subject rights.
 
He regularly advises on the UK GDPR, EU GDPR and the UK Data Protection Act 2018 as well as global compliance challenges through the Simmons & Simmons network of offices and established network of trusted advisors in other countries.
 
His experience includes advising a global technology company on AI-related data protection issues and the interaction between the GDPR and the EU AI Act; advising NVIDIA on the data aspects of a major project with Mercedes Benz in relation to the testing and deployment of autonomous driving technology; and advising Booking.com on data privacy compliance requirements associated with international transfers of data.  

Cyber security incidents and crisis response

 
When a significant cyber security incident or data breach occurs, Alexander helps clients navigate the legal, regulatory and operational challenges that follow.
 
Working closely with senior management, cyber security specialists, communications teams and risk professionals, he advises on incident assessment, regulatory notifications, communications with affected individuals and broader crisis management considerations. His focus is on helping organisations respond effectively while managing legal exposure, reputational risk and operational disruption.
 
He also advises clients on strengthening cyber resilience and governance following an incident, helping them identify lessons learned and improve their preparedness for future events.  

Outsourcing, technology and telecoms transactions

 
Alexander’s experience spans cloud services, SaaS contracts, software licensing, AI-enabled products and services, and large-scale transformation and outsourcing programmes. He also advises telecoms operators on communications data, telecoms security and resilience, network outsourcing and digital infrastructure projects.

His experience includes advising Virgin Media O2 on the outsourcing of its customer care operations supporting more than 46 million customers; a global financial institution on a portfolio and advisory services outsourcing involving approximately £80 billion of investment assets; and advising BT on a suite of commercial agreements underpinning the divestment of its Irish data centre and networks business in two separate transactions.

Recognition and industry profile

Alexander is ranked by Chambers UK for Telecommunications and Information Technology & Outsourcing and recognised by The Legal 500 for TMT and Data Protection, Privacy and Cybersecurity.

He regularly speaks and comments on AI regulation, data protection, cyber security, digital transformation and technology outsourcing.

Clients describe him as excellent, providing "clear, pragmatic and actionable advice" and as a trusted adviser on complex technology, regulatory and transformation projects.