Jump to Navigation Michelmores About Us Events Publications Contact Us Our People Expertise Careers More Search Data Protection and Privacy Regardless of what your business does, we live in a world where data is one of a business's most valuable assets. In an age of tracking devices, an active regulator, published security breaches and individuals' increasing awareness of their legal rights, it is vital that businesses are on top of the regularly evolving data protection, privacy and information security laws. Michelmores' award-winning Technology, Media and Communications team has an expert team of Data Protection Solicitors advising on all aspects of privacy, data protection and information management and security. Our specialist advice ranges from drafting all necessary arrangements in a business to ensure that they are compliant with the latest data protection laws to engaging with the Information Commissioner's Office to manage and minimise the effect of non-compliance by a business. We advise on: All aspects of data protection and privacy law including the EU's General Data Protection Regulation 2016, the UK data protection regime under the Data Protection Act 2018 and retained EU law, the Privacy and Electronic Communications (EC Directive) Regulations 2003, Freedom of Information Act 2000 and the Environmental Information Regulations 2004. Data processing agreements and clauses. Multi-jurisdictional and domestic data transfers including transfers of personal and sensitive personal data to countries within and outside of the EEA. Notifications of data breaches to the Information Commissioner. Enforcement action. The appropriate collection of consents data protection and e-privacy legislation. Direct marketing. Internal policies and procedures including internal data protection handbooks, data protection impact assessments and legitimate interests assessments Website operators' obligations in connection with the use of cookies or other tracking devices (privacy policies and cookies policies) The data protection implications of the ad-tech industry and the targeting of online ads to individuals Advising on patient data issues in the health and social care sector. Related Areas Commercial Employment Health Sector Central Government Emergency Services Food & Drink Further Education Colleges Independent Schools Local Government Intellectual Property News ICO Prosecution of Employee for Improper Use of Personal Data The implications of a "no-deal" Brexit on the cross-border transfer of personal data The legacy of Schrems II Handling EU data subjects' personal data post-Brexit GDPR requirement for an EU representative Firms should consider implications of Brexit for the cross-border transfer of personal data ICO to fine Marriott International £99,200,396 for Cyberattack ICO to fine British Airways £183.39 million for Cyberattack Fake news or libel? More Get in touch Tom Torkar Partner tom.torkar@michelmores.com +44 (0)1392 687626 Download V-Card View full profile Meet the team Jayne Clemens Partner Marie-Louise King Partner Nathaniel Lane Associate Justin Barrow Associate Andrew Oldland QC Partner Abbey Smith Solicitor Chloe Vernon-Shore Senior Associate Philippa Collison Associate Emily Aggett Senior Associate Recent experience Advising a multi-national auction house in connection with the marketing consents collected for use as part of an email and print marketing campaign. Drafting all relevant data protection clauses in various agreements, Model Contract Clauses and policies to allow an event organiser to process personal data all over the world. Conducting and managing a cross border review of a major online retailer's privacy policies. Negotiating with the Information Commissioner regarding enforcement action including attending formal meetings with the Information Commissioner regarding the same. Providing bespoke internal training programs for a range of organisations and corporate clients to raise the awareness of ata protection and information security. Advising a bank established in the UK on how to deal with information requests from US enforcement authorities which would have resulted in transfers of personal data. Advising a local healthcare provider in relation to their patient data obligations under the various legislation (including the National Health Service Act 2006 and the Health and Social Care Act 2012). Advising a client operating a gaming platform potentially hosted in the US in connection with the recent Safe Harbor decisions of the European Court. The General Data Protection Regulation: What does it mean for you? Locations London Bristol Exeter Careers Graduates Legal Professionals Business Services Subscribe to our updates Sign up here CONNECT WITH US Keep the conversation going. enquiries@michelmores.com LINKEDIN TWEET FACEBOOK © Michelmores LLP is a Limited Liability Partnership, authorised and regulated by the Solicitors Regulation Authority and registered in England and Wales under Partnership No. OC326242. The registered office is Woodwater House, Pynes Hill, Exeter, EX2 5WR. A list of the members (all of whom are solicitors or barristers) is available for inspection at the registered office and at www.michelmores.com Terms & conditions Privacy policy Legal notice Terms of Business Complaints procedure Modern Slavery Act Accessibility CSR Diversity & Inclusivity Pricing Site index Staff Login Cookie Control Icon Your choice regarding cookies on this site We use cookies on this site to offer you a better browsing experience. You can manage the cookies that you consent us to use at any time, by clicking on "Settings". By clicking "Accept" you consent to our use of necessary and optional cookies. For more information please see our Privacy Policy. Accept Settings