Data Protection & Information Law | UK

Hogan Lovells deploys an excellent team of data protection and privacy specialists in the full range of issues faced by clients around the world. The team works with household names in the insurance, telecommunications and automotive sectors, among others. The lawyers are experienced in providing counsel on BCR applications and on new and prospective public policy changes and take a prominent role in thought leadership. Hogan Lovells demonstrate comprehensive understanding of GDPR and its corporate implications, as well as extensive cross-border regulatory connections.

A&O Shearman provides highly skilled counsel on the full range of matters within information law and can handle mandates requiring cross-border expertise. The team is regularly instructed by multinational clients, drawn largely from retail, financial services and media. It is particularly adept at guiding clients through regulatory issues before the ICO, as well as privacy matters requiring a broad global footprint.

Covington & Burling offers nuanced and sophisticated advice on information law issues, including the need to balance worldwide data transfer policies with competing regulatory regimes. It is especially highly regarded in terms of the data protection issues facing clients in the pharmaceutical and healthcare industries, as well as technology companies. It fields strong international resources, policy development experience and notable contentious capabilities. The team regularly works with well-known names in the financial services, media and technology fields.

Mishcon de Reya's team advises on the full range of data protection matters while attracting particular praise for its strength in litigation such as major collective actions. The team is also recognised for its expert handling of non-contentious GDPR requirements and FOI mandates. The firm is noted for its work in relation to cybersecurity and its ability to guide clients in terms of operation resilience and breach response.

Osborne Clarke has a technology-focused data protection practice with a client list featuring a large number of the most prominent and sophisticated companies in the sector. It has further experience in relation to the financial services, energy, media and communications industries, and the team demonstrates broad international reach. Notable strengths lie in subject access requests and crisis management, including cases involving the ICO.

Pinsent Masons offers experienced lawyers well placed to advise on the intricacies of data protection, with particularly respected expertise in contentious situations. Clients are drawn from a wide range of industries, with a majority in the banking and technology spaces. The team is well versed in cybersecurity and crisis management, fielding strength in both high-stakes contentious mandates and compliance counselling.

Reed Smith has wide-ranging specialist expertise with a particular emphasis on the energy, life sciences, entertainment and financial services industries. The team is recommended for its counsel on complex information law issues to clients with international requirements and who are reliant on cross-border data transfers. It draws on longstanding technological expertise when advising on developing issues such as virtual reality privacy issues and the fintech market.

Sidley Austin has up-to-the-minute command of data and information law in support of firm-wide specialisations in heavily regulated industries, such as life sciences, healthcare and financial services. The team regularly advises on data transfers and the implications of GDPR and is often instructed on international data breach work.

AWO is a law firm and consultancy offering advice and representation to NGOs, individuals and corporations regarding Data Protection Impact Assessments, challenges to tech platforms, 'right to be forgotten' requests and governments on their use of personal data. The firm is well-regarded for its ability to handle contentious data protection matters, such as breaches of GDPR or misuse of personal data. The firm is also able to offer data protection advice in cutting-edge or complex areas, including the implementation of AI.

CMS has a highly competent group of technology lawyers with experience advising clients in a diverse range of industries. It is particularly expert in relation to data protection issues in financial services and telecommunications. The team frequently handles investigations undertaken by regulatory bodies, including the ICO. Their expertise covers cybersecurity and BCR applications.

Freshfields is a global firm able to handle a range of regulatory matters. The team's capabilities span GDPR, cybersecurity, breach response and ICO investigations. The firm is noted for experience handling compliance matters in relation to AI products. The firm's broad client base ranges from blue-chip corporates to charities.

Norton Rose Fulbright's clients include leading financial institutions and retailers, and it offers considerable cross-border expertise advising clients on data protection issues across North America, Europe and Asia. The team is well-versed in matters concerning all aspects of GDPR, managing ICO investigations and e-commerce issues.

Shoosmiths offers data protection expertise to household-name brands. The team is adept at leading data training sessions as well as advising clients on international data transfers and the use of data in connection with biotech and adtech.

Ashurst is recognised for its ability to assist global-facing businesses with various data protection matters, such as GDPR compliance, data processing and risk assessments. The team advises on cutting-edge topics in data law such as generative AI or virtual reality. The team can guide clients through cybersecurity incidents such as data breaches or ransomware attacks.

BCL Solicitors has significant experience advising notable social media and technology clients in privacy topics concerning investigatory powers and surveillance law. The lawyers are skilled at guiding data controllers in regulatory enforcement matters. They also advise on information law disputes arising from the limits of freedom of speech.

Burges Salmon represents public and private sector clients in data protection matters, such as subject access requests and regulatory compliance. The team is skilled at cybersecurity issues and advises on ransomware and data breaches. The lawyers also handle privacy topics concerning surveillance and employee monitoring.

Cooley's London office offers a highly experienced team that can advise across data privacy and cybersecurity matters. It guides notable technology clients in a variety of topics, such as GDPR compliance, BCRs and data transfers. It is recommended for assistance to clients with the impacts of emerging technology, such as the implications of AI or the processing of biometric data.

Digiphile is a well-regarded boutique offering expert advice in data protection, AI and digital regulation matters. The lawyers service noteworthy corporates in a variety of sectors, including technology, pharmaceuticals and media.

Goodwin's London office is recommended for experience advising on complex privacy and cybersecurity topics. The firm has deep expertise in data protection matters in the technology, financial and life sciences sectors, among others. The team is highlighted for their guidance on emerging technologies, such as AI.

HelloDPO Ltd is a boutique firm specialising in data and information law. The firm provides an external data protection officer service for corporate and partnership clients, and has particularly notable followings among law firms, retailers and software companies.

Kemp IT Law is a highly regarded boutique offering vast experience in data protection and information law matters, such as compliance with EU and UK privacy and cyber-related regulations. The firm's clients include technology companies, media organisations and law firms, among others. It offers further expertise advising on AI governance.

RPC offers a full-service data protection practice. With expertise in data privacy issues relating to compliance breaches and regulatory investigations, RPC advises clients across the public and private sectors. The team boasts an impressive client roster that cuts across the technology, financial services and retail sectors. The firm is recommended for its expertise in cybersecurity-related issues and can assist clients in data breach and ransomware matters.

Squire Patton Boggs offers deep expertise in AI and data regulatory matters. The team also advises on biometrics and facial recognition technology. The lawyers are able to guide clients through cybersecurity matters, including data breach and ransomware attacks.

Stephenson Harwood acts on behalf of major corporates on sophisticated contentious and non-contentious data protection matters. The team provides high-quality advice on regulatory compliance, DSARs, and AI usage, among other topics. It is also adept at guiding clients in cybersecurity matters, such as on data breaches.