Back to our skills

Data Protection and Privacy

With our strong focus on technology, we approach data protection and privacy by balancing the operational needs of our clients with the regulatory and ethical requirements of privacy. We work with clients across diverse sectors, from those for whom data processing is merely incidental to their activity, to those for whom data is central to the business model. Our practice ranges from supporting organisations in traditional, low-digital environments to advising highly specialised data-driven businesses and data brokers.

 

How we support our clients 

Privacy is not only a fundamental right; it is also a reputation and trust criterion. Protecting it is essential for all parties. With this in mind, we support our clients in several ways:

  • Implementing compliance mechanisms aligned with the GDPR, national legislation and regulatory guidance
  • Drafting and negotiating Data Processing Agreements (DPAs) and processor/sub-processor frameworks
  • Providing guidance on international data transfers, including Standard Contractual Clauses and adequacy mechanisms
  • Conducting preventive or reactive legal audits 
  • Drafting privacy policies, terms of use and internal codes of conduct
  • Assessing new or innovative processing activities, including in the context of new business units or service lines
  • Supporting incident response and data breach management, including public communication and notification to supervisory authorities
  • Representing clients before data protection authorities and assisting in sanctioning procedures
  • Designing and delivering training and awareness programmes for internal teams

 

Our approach

Data protection and privacy require a careful balance between security, efficiency and proportionality. Therefore, we: 

  • Prioritise compliance models tailored to the organisation’s operational reality 
  • Work closely with IT, Human Resources, Quality and Compliance teams
  • Follow governance practices based on accountability, transparency and prevention
  • Develop scalable solutions that anticipate risk and strengthen stakeholder trust