Data Protection

Our dedicated Data Protection, Privacy and Cybersecurity Practice has unrivalled experience and offers clients best-in-class solutions to address their legal and compliance needs. Our expertise covers the full range of regulatory, commercial and global aspects of data protection and cybersecurity and, working in tandem with the Drew Academy, addressing our clients’ needs with an integrated and holistic approach.

Work highlights:

• • Development / adaptation of local, regional or global data protection policies, frameworks and compliance programmes;
  • Implementation of cross-border data protection requirements including in relation to cloud-based services and cross-border transfers of personal data;
  • Response to data breaches and cybersecurity incidents, including the reporting and disclosure obligations and remediation requirements to comply with applicable laws and obligations;
  • Data protection / cybersecurity audits for compliance with applicable laws and frameworks such as APEC Cross-Border Privacy Rules System, and Singapore’s Data Protection Trust Mark; and
  • Advising on specific data protection issues, such as use of device IDs and cookies in relation to the collection of data, data retention and use for business purposes, legal issues relating to digital certification services, electronic signatures, and encryption keys, and assisting on responses to information requests made pursuant to investigations by law enforcement and regulatory authorities.