Rocio de la Cruz Principal Associate Dual Spanish and UK Qualified solicitor: SRA number 634508

Speaks:  English, Spanish

Primary office:  Birmingham

Rocio de la Cruz

Rocio is a dual qualified UK solicitor and Spanish lawyer with more than 15 years expertise in data protection and Freedom of Information law in different jurisdictions. She is the lead lawyer for global data protection compliance projects at the UK office. With her multi-jurisdictional knowledge she is well-placed to advise clients on the harmonisation of data protection, cookies and e-marketing rules applied to public and privacy sector not only in light of Brexit but also from a global perspective. She also has particular interest and expertise in the fields of use of data for research purposes, AI, blockchain and innovative app developments and related data privacy and cyber security issues for which she is usually involved in complex multiparty projects.

She is also incredibly innovative, and clients define her as "a geek-privacy lawyer with a strategic and passionate vision", "a very engaging speaker – her down to earth, relaxed delivery made the principles very memorable.", and "Really inspirational".


  • Undertaking risks assessments and advising on implementation of safeguards for data to me transferred internationally
  • Carrying out Data Protection Audits
  • Carrying out Data Protection Impact Assessments
  • Advising on additional measures under supplementary domestic law in the UK and Spain, and coordinating multi-jurisdictional advice in global compliance projects;
  • Assisting clients with Data Mapping and Records of Processing exercises
  • Drafting data privacy policies, guidelines and statements
  • Drafting and negotiating data sharing agreements, data transfer agreements and other arrangements and protocols required under the data protection legislation.
  • Training board of directors and staff on Data Protection and Freedom of Information issues
  • Producing tailored checklists to help in-house staff to undertake self-assessments
  • Assisting clients with data subject requests and freedom of information requests
  • Drafting information notices for data subjects, including drafting easy-to-understand scripts to be used in video and vignette formats.


UK Qualified solicitor: SRA number 634508

Spanish Qualified lawyer: Colegio de Abogados de Madrid, reg. n. 78481

European lawyer identity card: Number 3400-01940.

Career & Recognition

Filter timeline:
  • 2016

    • Career
      Gowling WLG (UK), principal associate
  • 2015

    • Career
      Birmingham City Council, privacy and information law lawyer
  • 2013

    • Career
      Global Actio Abogados, founder
  • 2005

    • Career
      Sole Practitioner, lawyer

Client work

Client work
15 December 2020 Expertus Technologies acquired by IBM