Data Protection & Information Law | UK

Hogan Lovells deploys an excellent team of data protection and privacy specialists in the full range of issues faced by clients around the world. The team works with household names in the insurance, telecommunications and automotive sectors, among others. The lawyers are experienced in providing counsel on BCR applications and on new and prospective public policy changes and take a prominent role in thought leadership. Hogan Lovells demonstrate comprehensive understanding of GDPR and its corporate implications, as well as extensive cross-border regulatory connections.

Covington & Burling offers nuanced and sophisticated advice on information law issues, including the need to balance worldwide data transfer policies with competing regulatory regimes. It is especially highly regarded in terms of the data protection issues facing clients in the pharmaceutical and healthcare industries, as well as technology companies. It fields strong international resources, policy development experience and notable contentious capabilities. The team regularly works with well-known names in the financial services, media and technology fields.

A&O Shearman provides highly skilled counsel on the full range of matters within information law and can handle mandates requiring cross-border expertise. The team is regularly instructed by multinational clients, drawn largely from retail, financial services and media. It is particularly adept at guiding clients through regulatory issues before the ICO, as well as privacy matters requiring a broad global footprint.

Mishcon de Reya's team advises on the full range of data protection matters while attracting particular praise for its strength in litigation such as major collective actions. The team is also recognised for its expert handling of non-contentious GDPR requirements and FOI mandates. The firm is noted for its work in relation to cybersecurity and its ability to guide clients in terms of operation resilience and breach response.

Pinsent Masons offers experienced lawyers well placed to advise on the intricacies of data protection, with particularly respected expertise in contentious situations. Clients are drawn from a wide range of industries, with a majority in the banking and technology spaces. The team is well versed in cybersecurity and crisis management, fielding strength in both high-stakes contentious mandates and compliance counselling.

Reed Smith has wide-ranging specialist expertise with a particular emphasis on the energy, life sciences, entertainment and financial services industries. The team is recommended for its counsel on complex information law issues to clients with international requirements and who are reliant on cross-border data transfers. It draws on long-standing technological expertise when advising on developing issues such as virtual reality privacy issues and the fintech market. 

Sidley Austin has up-to-the-minute command of data and information law in support of firm-wide specialisations in heavily regulated industries, such as life sciences, healthcare and financial services. The team regularly advises on data transfers and the implications of GDPR and is often instructed on international data breach work.

CMS has a highly competent group of technology lawyers with experience advising clients in a diverse range of industries. It is particularly expert in relation to data protection issues in financial services and telecommunications. The team frequently handles investigations undertaken by regulatory bodies, including the ICO. Their expertise covers cybersecurity and BCR applications.

Osborne Clarke has a technology-focused data protection practice with a client list featuring a large number of the most prominent and sophisticated companies in the sector. It has further experience in relation to the financial services, energy, media and communications industries, and the team demonstrates broad international reach. Notable strengths lie in subject access requests and crisis management, including cases involving the ICO.

Ashurst is recognised for its ability to assist global-facing businesses with various data protection matters, such as GDPR compliance, data processing and risk assessments. The team advises on cutting-edge topics in data law such as generative AI or virtual reality. The team can guide clients through cybersecurity incidents such as data breaches or ransomware attacks.

AWO is a law firm and consultancy offering advice and representation to NGOs, individuals and corporations regarding Data Protection Impact Assessments, challenges to tech platforms, 'right to be forgotten' requests and governments on their use of personal data. The firm is well-regarded for its ability to handle contentious data protection matters, such as breaches of GDPR or misuse of personal data. The firm is also able to offer data protection advice in cutting-edge or complex areas, including the implementation of AI.

Cooley's London office offers a highly experienced team that can advise across data privacy and cybersecurity matters. It guides notable technology clients in a variety of topics, such as GDPR compliance, BCRs and data transfers. It is recommended for assistance to clients with the impacts of emerging technology, such as the implications of AI or the processing of biometric data.

Freshfields is a global firm able to handle a range of regulatory matters. The team's capabilities span GDPR, cybersecurity, breach response and ICO investigations. The firm's broad client base ranges from blue-chip corporates to charities.

RPC offers a full-service data protection practice. With expertise in data privacy issues relating to compliance breaches and regulatory investigations, RPC advises clients across the public and private sectors. The team boasts an impressive client roster that cuts across the technology, financial services and retail sectors. The firm is recommended for its expertise in cybersecurity-related issues and can assist clients in data breach and ransomware matters.

Shoosmiths offers data protection expertise to household-name brands. The team is adept at leading data training sessions as well as advising clients on international data transfers and the use of data in connection with biotech and adtech.