Data, Privacy and Information Law

Case highlights

• Advising the Financial Conduct Authority on its GDPR preparation and readiness project.
• Advising a group of nine police forces – development of a new software product – subject matter expertise and enshrining privacy by design to ensure the product is GDPR compliant.
• Advising a Police &Crime Commissioner – implementation of a new governance model, revising their constitution and data protection policies to ensure compliance with the GDPR and the Law Enforcement Directive.
• Advising a County Council on a business critical transfer of large volumes of sensitive personal data outside of the EEA, including drafting appropriate data processing terms and ensuring safeguards were implemented.
• Advising a group of local authorities on responding to a series of FOI Act requests from the BBC, Sunday Mirror, a claims management company and private individuals – high profile public law matter.
• Advising an innovative technology company based in Israel on its GDPR compliance roadmap, in support of its bid to a major UK retailer.
• FCA – appointed by the Financial Conduct Authority (FCA) to provide support and assistance with respect to addressing a number of Data Subject Access Requests received pursuant to the GDPR and to provide external Data Protection Officer support.
• Wiltshire Council – FOI requests – advised on a series of complex FOI queries following the award of its BDUK superfast broadband contract. Reviewed ICO decision & ancillary documentation, advised on procedure for lodging appeal against ICO decision and drafted Notice of Appeal for submission to the FTT – successfully resolved.
• Seven Forces – Data Protection Impact Assessment – advised on the contents of initial draft Data Protection Impact Assessment (DPIA) for new project regarding a change in the way recruits are trained. Met with internal information officers to understand the data flows and work through the different processes so the DPIA accurately reflected the new ways of working.