On this page
Privacy programmes and implementation
We review existing practices, identify gaps and prepare the policies and implementation documents needed to address them. The work connects legal requirements with the organisation’s activities, internal responsibilities and use of personal data.
The team’s experience includes privacy-programme design and implementation, compliance audits and the preparation of legal guidance and implementation materials.
Assessments, vendors and contracts
We prepare and review data-protection impact assessments, examine the privacy arrangements of vendors and review contractual provisions concerning personal data. This includes considering the proposed processing, the responsibilities of the parties and the legal issues raised by the arrangement.
Requests and privacy incidents
We advise on handling data-subject requests and on the legal and privacy aspects of incident response. Our work includes reviewing the circumstances, relevant records and proposed communications, and advising on the steps required by the applicable data-protection framework.
Technology agreements and digital evidence
We address data-protection and licensing provisions in technology and service agreements, drawing on the team’s commercial-contract experience. We also examine legal questions concerning electronic evidence and its use in disputes.
Where a matter involves alleged cybercrime, the criminal-procedure and defence work is handled within Criminal Litigation.