Privacy & Cyber Security

We ask the questions that you didn't know you needed to. Making sure you stay compliant with global and domestic data privacy regulations, we help your business to have everything in place. From training and policies to privacy and data processing and management protocols, we help you to prepare for issues before they appear.

In the event of a cyber-attack, you need to avoid financial, legal and reputational damage as much as possible. You need to know you have got support around you that has the experience to act quickly and efficiently. Our priority is the best possible outcome for our clients. Our team of cyber security lawyers can advise you on reporting obligations, insurance considerations, potential class-action liability and managing investigations.

We cover all aspects of litigation concerning cyber security and data protection. From helping you settle on favourable terms or recovering damages and data, we can help develop a robust litigation strategy. Our approach will carefully assess the facts, your business objectives and the defences available to you.

No business wants to have a data breach. Apart from the potential regulatory penalties and reputational damage, there is also a risk of losing valuable information, time and revenue. Since the General Data Protection Regulation (GDPR) and mandatory breach reporting under the Personal Information Protection and Electronic Documents Act (PIPEDA) came into force, regulators have seen a surge in data breaches being reported to them. Our dispute resolution experts can work with you to decrease the risk and impact of such an incident.

We can assist you with incident response planning, staff training and reviewing policies and processes. In the event of a breach, we can also help you fulfil reporting obligations, conduct investigations and take remedial action.

Requests for personal information/DSARs made to organisations under privacy laws such as the GDPR and PIPEDA are becoming increasingly common and can be difficult to handle. Our data protection solicitors can help you with DSARs and guide you through the process. Working in partnership with leading IT services providers, we give you access to a dedicated support team to help reduce time and cost. Our services include helping you plan for DSARs through suitable processes and training. We can also advise on data collection and search methodologies as well as how to manage requests themselves.

Getting privacy notices and policies right is critical to any data protection and processing activity. We can support you in drafting these documents and keeping them updated as requirements change.

Our data protection audits assess your business to identify any issues that need to be rectified from a compliance perspective. We review your current processing activity and procedures and make recommendations based on the most up-to-date legislation.

A strong technical framework is just as important as having the correct data management policies. We work with experienced IT providers to rigorously test your systems. Using penetration testing, compliance reviews and social engineering security assessments we will help you to conduct gap analysis.

When data needs to be shared between parties, it is essential that the appropriate agreements are in place to safeguard your business. We can support you with contract negotiations with data controllers and processors, as well as third party service providers. We can also assist with negotiating and structuring Data Sharing Agreements.

Privacy laws will often set out how personal data can be transferred between jurisdictions. Our team can advise you on the action you need to take to ensure compliance with the relevant data privacy laws for the data you hold.