Data Protection & Information Law | UK

Bird & Bird is renowned for its data protection specialists with especially strong expertise in the communications, technology, pharmaceutical and financial services industries. They are relied on for advice in relation to cutting-edge issues arising out of the implementation of GDPR and ICO investigation response strategies. The large, dedicated team handles market-leading work both within the UK and internationally.

Bristows' extremely experienced and accomplished data team specialises in data protection from both advisory and contentious perspectives. It provides compliance advice to multinational companies concerning emerging technologies and data handling regimes, and the lawyers regularly work with clients on data breaches. The team enjoys a reputation as a go-to practice for cross-border privacy disputes and regulatory concerns.

Hogan Lovells deploys an excellent team of data protection and privacy specialists in the full range of issues faced by clients around the world. The team works with household names in the insurance, telecommunications and automotive sectors, among others. The lawyers are experienced in providing counsel on BCR applications and on new and prospective public policy changes and take a prominent role in thought leadership. Hogan Lovells demonstrate comprehensive understanding of GDPR and its corporate implications, as well as extensive cross-border regulatory connections.

Linklaters has a large team of solicitors at all levels of seniority with substantial expertise in advising multinational clients on information law issues. It is especially highly regarded for contentious matters where there is an overlap with media and telecommunications law. The team frequently acts on large-scale cross-border mandates, drawing on its strong global offering. It is also recognised for activity in the accounting, healthcare, banking and retail industries.

Covington & Burling offers nuanced and sophisticated advice on information law issues, including the need to balance worldwide data transfer policies with competing regulatory regimes. It is especially highly regarded in terms of the data protection issues facing clients in the pharmaceutical and healthcare industries, as well as technology companies. It fields strong international resources, policy development experience and notable contentious capabilities. The team regularly works with well-known names in the financial services, media and technology fields.

DLA Piper is an extremely well-resourced firm with the international reach to handle global information law projects. It has impressive expertise in data protection issues facing clients in the technology, life sciences and financial services sectors. The practitioners are experts on issues such as GDPR compliance, cybersecurity and e-commerce.

Fieldfisher fields a high standard of expertise in the full range of data protection and information law issues. Its areas of focus include data transfers, cyber breaches, data security and compliance with adtech regulations. The team has especially strong capabilities in regard to challenging regulatory decisions and brings a global perspective to its broad roster of work, which includes a focus on the impact of the Privacy Shield on international data transfers and all aspects of GDPR.

Latham & Watkins has data protection expertise located in many key jurisdictions, offering experience and resources in data-rich sectors such as technology and financial services. The team's areas of focus include cybersecurity and data breaches, regulatory compliance, and cross-border disputes and investigations.

A&O Shearman provides highly skilled counsel on the full range of matters within information law and can handle mandates requiring cross-border expertise. The team is regularly instructed by multinational clients, drawn largely from retail, financial services and media. It is particularly adept at guiding clients through regulatory issues before the ICO, as well as privacy matters requiring a broad global footprint.

Clients across a range of highly regulated sectors, including tech, media and healthcare, benefit from Baker McKenzie's extensive GDPR experience. The team advises on ICO investigations and assists clients with DSARs, and its global platform makes the firm a natural choice for clients seeking international privacy counsel.

Dentons has the reach to provide comprehensive compliance design advice to the largest of clients operating in all major regulatory regimes. It regularly works with clients in aviation, energy and retail, and the team is especially good on the application of information law to social media. It draws on impressive multi-jurisdictional resources to assist wide-ranging companies with GDPR compliance and cybersecurity concerns, including responding to major incidents.

Mishcon de Reya's team advises on the full range of data protection matters while attracting particular praise for its strength in litigation such as major collective actions. The team is also recognised for its expert handling of non-contentious GDPR requirements and FOI mandates. The firm is noted for its work in relation to cybersecurity and its ability to guide clients in terms of operation resilience and breach response.

Pinsent Masons offers experienced lawyers well placed to advise on the intricacies of data protection, with particularly respected expertise in contentious situations. Clients are drawn from a wide range of industries, with a majority in the banking and technology spaces. The team is well versed in cybersecurity and crisis management, fielding strength in both high-stakes contentious mandates and compliance counselling.

Reed Smith has wide-ranging specialist expertise with a particular emphasis on the energy, life sciences, entertainment and financial services industries. The team is recommended for its counsel on complex information law issues to clients with international requirements and who are reliant on cross-border data transfers. It draws on long-standing technological expertise when advising on developing issues such as virtual reality privacy issues and the fintech market.

Sidley Austin has up-to-the-minute command of data and information law in support of firm-wide specialisations in heavily regulated industries, such as life sciences, healthcare and financial services. The team regularly advises on data transfers and the implications of GDPR and is often instructed on international data breach work.

Bryan Cave Leighton Paisner retains experienced practitioners known particularly for their handling of complex contentious proceedings turning on central issues of data protection and information law. The team is noted for advice on matters relating to the Freedom of Information Act. It has significant experience in allegations of hacking and the misuse of personal data, as well as the provision of GDPR compliance counsel for a wide-ranging client base, and is well equipped to advise clients on the coordination of their international data protection policies.

CMS has a highly competent group of technology lawyers with experience advising clients in a diverse range of industries. It is particularly expert in relation to data protection issues in financial services and telecommunications. The team frequently handles investigations undertaken by regulatory bodies, including the ICO. Their expertise covers cybersecurity and BCR applications.

Farrer & Co's experienced team of information law experts handles data protection matters for a range of clients, including compliance projects for the transfer of data domestically and within the EU. It is particularly active in sports, media, higher education and the third sector, and its expertise includes advising public authorities on ICO proceedings and handling data protection issues arising from child safeguarding matters. The team is also noted for cybersecurity and data subject access request matters.

Herbert Smith Freehills has a well-resourced data and technology law practice recommended for complex contentious and non-contentious matters. Its best-known area of expertise is in relation to cybersecurity issues, including crisis management and wide-ranging risk mitigation strategies. The team's sector expertise covers financial services, education, retail and utilities, among others.

Hunton Andrews Kurth fields outstanding depth of expertise in the full range of data protection and information law concerns, including advice on the implications of new domestic and international regulatory frameworks. The team is regularly instructed to handle BCR applications as well as crisis management in the event of data and cybersecurity breaches.

Lewis Silkin's diverse data protection practice encompasses a range of sectors from financial services to media and entertainment. It is particularly well known for the handling of sensitive data relating to employment. The team frequently advises on GDPR compliance and provides support with compliant adtech. The team also handles contentious matters, including breaches and subject access requests.

Norton Rose Fulbright's clients include leading financial institutions and retailers, and it offers considerable cross-border expertise advising clients on data protection issues across North America, Europe and Asia. The team is well versed in matters concerning all aspects of GDPR, managing ICO investigations and e-commerce issues.

Osborne Clarke has a technology-focused data protection practice with a client list featuring a large number of the most prominent and sophisticated companies in the sector. It has further experience in relation to the financial services, energy, media and communications industries, and the team demonstrates broad international reach. Notable strengths lie in subject access requests and crisis management, including cases involving the ICO.

Taylor Wessing has a large group of specialists in data protection and information law. The team is especially well regarded for critical data breaches and the compliance issues associated with the transfer of information between jurisdictions. It is adept at advising on the development of privacy-related technology for an impressive global client base and works with many in the banking, private equity and accounting sectors.

White & Case is a global firm with the resources and expertise to handle multi-jurisdictional compliance programme design for household-name clients in a number of industries. Handling matters such as data breaches, privacy policies and international data transfers, the team retains especially large client followings in the financial services and technology sectors. It is noted for its extensive thought leadership in areas such as the implications of GDPR.

Ashurst is recognised for its ability to assist global-facing businesses with various data protection matters, such as GDPR compliance, data processing and risk assessments. The team advises on cutting-edge topics in data law such as generative AI or virtual reality. The team can guide clients through cybersecurity incidents such as data breaches or ransomware attacks.

AWO is a law firm and consultancy offering advice and representation to NGOs, individuals and corporations regarding Data Protection Impact Assessments, challenges to tech platforms, 'right to be forgotten' requests and governments on their use of personal data. The firm is well-regarded for its ability to handle contentious data protection matters, such as breaches of GDPR or misuse of personal data. The firm is also able to offer data protection advice in cutting-edge or complex areas, including the implementation of AI.

Bates Wells employs its highly developed information law capabilities in relation to the charity and third sector. The firm is experienced in handling contentious proceedings in connection with data protection, including cases heard in the Supreme Court. It also advises on matters concerning the Freedom of Information Act. The team attracts an impressively diverse nationwide client base that includes healthcare entities and public sector bodies.

Clifford Chance retains profound expertise in the data and information law implications of complex corporate and commercial transactions. Its practitioners are experienced in handling issues such as GDPR, both contentious and non-contentious, and data aspects of M&A, and the team has the resources to advise clients on compliance programmes spanning multiple jurisdictions.

Clyde & Co offers a comprehensive contentious and non-contentious data and cyber practice. Best known for its work in the insurance sector, the team acts for clients across industry sectors. Its cyber incident response team is particularly well thought-of by clients.

Cooley's London office offers a highly experienced team that can advise across data privacy and cybersecurity matters. It guides notable technology clients in a variety of topics, such as GDPR compliance, BCRs and data transfers. It is recommended for assistance to clients with the impacts of emerging technology, such as the implications of AI or the processing of biometric data.

DAC Beachcroft has a respected data protection practice with strength in contentious and non-contentious cases. The team's expertise includes handling ICO investigations and liaising with other regulatory bodies, and it is well regarded for its ability to advise clients across the insurance market.

Freshfields is a global firm able to handle a range of regulatory matters. The team's capabilities span GDPR, cybersecurity, breach response and ICO investigations. The firm's broad client base ranges from blue-chip corporates to charities.

RPC offers a full-service data protection practice. With expertise in data privacy issues relating to compliance breaches and regulatory investigations, RPC advises clients across the public and private sectors. The team boasts an impressive client roster that cuts across the technology, financial services and retail sectors. The firm is recommended for its expertise in cybersecurity-related issues and can assist clients in data breach and ransomware matters.

Shoosmiths offers data protection expertise to household-name brands. The team is adept at leading data training sessions as well as advising clients on international data transfers and the use of data in connection with biotech and adtech.

Womble Bond Dickinson's core team of information law specialists provides high-level counsel to clients with complex data protection requirements. It advises large corporates as well as public sector organisations on all manner of advisory and contentious matters. The team's expertise covers GDPR compliance and professional training programmes and it draws on a wide global network to provide multi-jurisdictional advice to its broad national client base.