Our data protection experience

Our team acted swiftly, in an extremely time-limited context, to untangle the facts and status of each claim. We determined the legal issues, including the existence of defences, identified substantive risks, and presented the client with tactical advice on next steps.

We advised on complex UK GDPR arrangements, including international data transfer obligations following the landmark ‘Schrems II’ judgment from the Court of Justice of the European Union.

Our advice on the complex data protection landscape arrangements associated with Connected Car arrangements, enabled our client to address important GDPR compliance requirements, as well as to mitigate against cyber risks associated with the Connected Car ecosystem.

Our client met their regulatory deadlines for incident notifications at the national and international level. Our support enabled them to clearly explain events and issues to both regulators and individuals.

We provided our Cyber Response service - we worked with the client to deal with containment, as well as analysis of the data protection roles and responsibilities of the various parties to allow for informed notifications to be provided to the respective supervisory authority

The client required substantial assistance to understand its obligations, review the materials, and ensure that its disclosure was limited to what was legal and appropriate in all the circumstances.

We advised a private equity backed global crypto-exchange and currency provider on its worldwide IT and data protection arrangements, including GDPR and data protection law requirements, considering the multiplicity of transactional and dependency requirements of both the crypto-exchange and the crypto-currency using blockchain technology.

Our advice on the scope of the EU SCCs requirements has helped to significantly reduce the number of suppliers that our client has needed to engage with, allowing the client to focus on suppliers of key importance, risk, and complexity.