Information, data protection and privacy law

Our experience

We represent the full range of clients, from innovative start-ups, to global corporates (including those listed on NASDAQ), as well as public sector clients.

• Advising the Cleveland Clinic on data protection issues that arise in relation to its London hospital (including data sharing, research projects and incident response). 
• Supporting a number of US-based biotech / pharma companies with GDPR compliance on a range of clinical trials in the UK and Europe. We have advised on data sharing and analytics contracts, privacy information in informed consent forms and completed a notification programme with a number of supervisory authorities of the DPO and Authorised Representative where required.
• Supporting Siemens Healthcare with a wide range of ad hoc data protection queries and training. 
• Advising the UK's leading trade-only distributor of technology solutions, on the intra-group data sharing agreement for the global group and the data protection and security implications of the implementation of a global HR system. 
• Supporting iGPR, market leading, trusted provider of redaction and medical reporting software, on negotiations with key customers over data protection and security terms in their customer contracts, discussions with NHS England about data sharing through their interfaces and responding to issues relating to iGPR’s GP customers.
• Advised the leading provider of pathology services on a ransomware attach which crippled their IT systems and caused disruptions in the UK. Our advice on critical matters including ransom payment strategies, extraterritorial legal action options, breach notification obligations, and communications management has helped to mitigate regulatory, reputational and litigation risk.