Data Protection

What we do

Data is central to modern organisations, but its value brings significant legal, operational and reputational risk. We advise public and private sector clients on the responsible use, sharing and protection of personal data.

Our work spans data governance, privacy policies, contracts, international transfers, direct marketing, cookies, data subject rights, impact assessments, audits, training, cyber incidents and regulatory investigations. We also advise on the data protection implications of transactions, disputes and emerging technologies.

How we can help

We help organisations build practical privacy frameworks that work in the real world, from mapping data and identifying gaps to developing policies, negotiating contractual provisions, responding to data-related incidents and requests and training teams. When an incident occurs, we provide rapid support to assess risk, manage notifications and engage with the Information Commissioner’s Office.

The focus is on more than technical compliance. It is on enabling your organisation to use data confidently, maintain trust and respond effectively as regulation and technology evolve.

Audits, impact assessments and training

Identifying compliance gaps, assessing higher-risk processing and equipping teams to make informed decisions.

Contracts and privacy documentation

Drafting data protection clauses, privacy notices, cookie notices, consents and internal policies.

Data governance and compliance frameworks

Developing proportionate policies, records and accountability arrangements that support responsible use of personal data.

Data in transactions and disputes

Addressing privacy risk in database sales, corporate transactions, disclosure exercises and litigation.

Data sharing and international transfers

Structuring lawful disclosures, processor relationships and cross-border transfers.

Data subject rights

Managing subject access requests and other rights efficiently, including complex or contentious requests.

Direct marketing and PECR

Advising on email, telephone, cookies and digital marketing activity under UK GDPR and PECR.

ICO investigations and enforcements

Guiding organisations through regulatory enquiries, information requests and enforcement action.

Personal data breaches

Providing urgent support to contain incidents, assess risk and manage notification obligations.

The right legal experts, wherever you are.

Regional teams, nationally connected – we move quickly, stay close, and bring the right specialists together around you.

Partners who stay close

Our Partners take the time to understand what matters to each client and remain closely involved as work progresses. Their experience brings perspective, sound judgment and a clear sense of what may be needed next as we grow together. This continuity creates trusted relationships, keeps advice grounded in the wider context and gives clients direct access to the people responsible for guiding their most important decisions.

Advisers you won't outgrow

A relationship with us can develop as your ambitions, circumstances and priorities change, grow and evolve over the years. We bring together the right combination of legal and professional expertise from across the business, without losing the relationships and understanding already established. From our full spectrum of services for individuals and businesses alike through to our specialist services in chartered town planning, patent and trademark attorneys, tax, competition and regulatory with sector specialists across the board, you can draw on the broadest of capability while continuing to work with advisers who know what matters to you.

Experts on your doorstep

We believe clients shouldn't have to choose between accessibility and expertise. Our advisers are based in the communities where you live and work, providing the personal relationships and local understanding that come from being close at hand. Backed by a connected national business, you also get access to a wide range of specialist expertise.

Related insights