Data Protection & Information Law

With one of the biggest and most well-known teams in Europe, Bristows is the go-to firm for pragmatic, expert-informed data protection advice.  

We specialise in developing practical and proportionate compliance programmes for organisations, large and small and we have considerable expertise in building GDPR programmes.

We help companies ensure that specific technology-based products and services meet legal requirements at all stages of development. We understand how technology works at a data level in AI & machine learning, Adtech, facial recognition, digital health, app development and cloud computing, and regularly advise on related issues.

We are constantly advising organisations on how to ensure their internal and external data flows are lawful, based on the US Privacy Shield and EU Standard Clauses. We have also have a specialty in developing Binding Corporate Rules for both controllers and processors, and have drafted and negotiated BCRs for some of the world’s largest most well-known companies, with the ‘lead authority’ in the UK, France, Germany or the Netherlands. 

We frequently help our clients to respond to complex data subjects’ rights requests, this could involve advising on the best approach or taking the drafting on ourselves. 

We also have experience in coordinating data and cyber security plans as well as incident response plans and data breach notifications. We can call on many years of experience, assisting clients in many of the world’s largest breaches.