Loretta Pugh

* All representative matters prior to joining Gowling WLG

• Advising an insurance company in relation to international data transfers to the US. Advice included advising on EU and UK transfer regimes, performing transfer risk assessments and accommodating future changes to transfer rules.
• Advising a global health brand on its online marketing operations, including in relation to AdTech and cookies.
• Advising a real estate company in relation to an ICO investigation on the use of facial recognition technology.
• Advising a pharmaceutical company in the context of an investigation by the Competition and Markets Authority.
• Advising a high street fashion chain on data breach planning and approaches to mitigate compliance risks in relation to breach incidents.
• Advising a global tech company following a cyber-attack impacting 395,000 individuals in 73 jurisdictions. Advice included from shortly after the breach had been discovered (including coordinating the various impacted jurisdictions), regulator and data subject notifications, and subsequent regulator investigations.
• Advising various companies on the data protection implications of their 'software as a medical device' solutions, including consideration of the processing of health-related data and the clients' relevant obligations under medical device legislation.
• Advising a FTSE 100 company on its data protection policies and procedures; and the development of a data governance framework.
• Advising clients following the exercise of data subject requests, including data subject access requests in the context of litigation and employee disputes.
• Advising clients in relation to requests under the Freedom of Information Act 2000 and Environmental Information Regulations 2004.