GDPR Solicitors

Our GDPR specialists assist clients by drafting and advising upon a range of data protection compliant policies and procedures including:

• Website privacy policies, cookie policies and APP privacy policies;
• Privacy notices for businesses and commercial organisations, charities, professional bodies and membership organisations;
• Privacy notices and data protection documentation for an organisation’s employees, workers and contractors;
• Data protection policies, such as a privacy standard policy, data retention policy, data subject access request policy, records of processing activities and legitimate interest assessments and records;
• A review of processing of any sensitive data known as “special categories of data” and criminal conviction data; identifying conditions for processing such data and drafting of an appropriate policy document;
• A review of data protection clauses in commercial contracts, supplier contracts and sub-contractor contracts;
• Data processing agreements and data sharing agreements;
• Direct marketing consent notices;
• Data breach policies and data breach reporting and monitoring obligations and procedures; and
• Bring-your-own-device policies, IT/ data security policies.

We regularly advise clients in dealing with data breach incidents, including:

• notification obligations to the ICO and affected data subjects
• recording obligations
• remedying or mitigating the effects of the breach
• enabling mitigation by affected data subjects
• taking action against other parties responsible for the data breach
• dealing with potential claims by affected data subjects
• dealing with reputational issues

We advise clients upon international data transfers, including the drafting of standard contractual model clauses, international data transfer agreements, binding corporate rules and UK/US transfers.

We advise clients upon direct marketing activities in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR), to be further amended by the E-Privacy Regulations due to come into force.

We provide practical and pragmatic advice to assist clients with their GDPR compliance and value the long-term successful relationships we create with our clients.