Data Protection Solicitors

Individuals’ data is central to the success of many businesses. Used correctly, it can be a crucial asset. But tough data protection laws such as the UK General Data Protection Law (UK GDPR) and Data Protection Act 2018 mean that a data breach, or other breach of the law can result in significant financial penalties as well as huge reputational damage.

How can we help you

Our specialist data protection solicitors have a wealth of knowledge in this area and provide clear, practical advice. Our cross team approach means that we can offer you a complete data protection service.

We can help you to ensure your use of personal data is legally sound by:

  • assisting with drafting policies and procedures; this includes privacy notices, data protection policies, retention policies, records of data processing activities, cookies policies, privacy impact assessments and legitimate interest assessments
  • undertaking a high-level review to identify areas of concern/non-compliance and prioritise risk
  • providing advice following a data breach: we will help you establish if you need to report the breach to the Information Commissioner’s Office (which must be done within 72 hours) and/or notify individuals and assist you with that process, including drafting notification letters and reports
  • assisting you with responding to data subject access requests and other data subject requests, such as requests to erase or restrict data; with data subject access requests, we can help you to identify what personal data forms part of the data subject’s request, whether any exemptions apply and draft the response
  • drafting and negotiating data processing agreements, data sharing agreements and other commercial agreements, including model clauses
  • advising on transfers outside of the UK and appropriate safeguards
  • advising on electronic marketing obligations, including the application of the Privacy and Electronic Communications (EC Directive) Regulations 2003
  • advising on data protection issues such as whether you are a data controller or data processor in a commercial arrangement, the lawful bases for processing personal data (including consent) or if you can lawfully hand over personal data when requested by a third party such as the police
  • providing bespoke training for your staff

If things turn contentious, we can also support you by:

  • advising and representing you if you receive correspondence from or are investigated by the Information Commissioner’s Office; our regulatory solicitors are highly experienced in liaising with regulators and dealing with regulatory disputes
  • advising on data protection compensation claims and complaints
  • advising in relation to data subject access requests made as part of an employment dispute

For more information about how we can help you, please contact us by calling 0800 2800 421 or using our contact form above.

Meet the team

Sarah Wheadon


Julian Hamblin


Louise Thompson

Senior Associate

Andrew Boba

Chartered Legal Executive