Information governance, privacy and cybersecurity

Our dedicated global practice is composed of more than 80 information governance, privacy and cybersecurity lawyers based in many of the world’s key risk jurisdictions.

Risk advice icon

Risk advice

We help clients manage legal risks related to cybersecurity, privacy, data governance, eDiscovery, information technology, eCommerce and intellectual property.

Industry experience icon

Industry experience

Our clients include large corporates, government and specialist internet and datarich companies operating across a broad range of sectors including financial services; aviation; life sciences, healthcare and pharmaceuticals; retail; insurance; energy; telecommunications and technology.

Global coverage icon

Global coverage

We advise our clients across multiple jurisdictions and regions, including Europe, the United States, Canada, Latin America, Asia, Australia, Africa and the Middle East. As an integrated cross-border group, we provide our clients with an integrated worldwide service.

Our areas of work 

  • Investigation, containment and remediation of sophisticated data breaches and cybersecurity incidents
  • Data protection, privacy and cybersecurity audits, compliance risk assessment and remediation
  • Data security, privacy and technology regulatory response and litigation
  • Regulatory investigations by data protection authorities and sector specific regulators
  • Development of security and privacy policies, best practices and procedures
  • Privacy policies for organizations and their websites
  • Security incident investigation, response and remediation
  • Cloud services and computing
  • Cross-border data flow requirements, including Privacy Shield, EU Binding Corporate Rules and other solutions
  • Cybersecurity and privacy contract development and negotiation
  • Cyber risk management and incident response
  • Data hub relocation projects
  • Data protection program development, including supporting consumer engagement activities such as marketing and advertising
  • Leveraging personal information for advertising and marketing
  • Management of employee information and patient medical records
  • M&A transactions
  • Mobile privacy issues
  • Proactive incident response planning
  • Restrictions on collection and use of consumer information
  • Strategic regulatory compliance advice
  • Technology transactions
  • Vendor management program development and implementation

Data protection and privacy

Our deep industry experience and global perspective means that we can advise our clients at each stage of the data lifecycle. At the front end, we help our clients assess and reduce their privacy and security risks and comply with applicable laws.

When developing marketing programs or new products and services, we assist clients by advising on privacy and security at the outset to maximize the effectiveness of their offerings and avoid legal and regulatory pitfalls.

We advise clients on complex issues associated with both personal and sensitive business data, including its collection, use, storage, disclosure, transfer and destruction.

We counsel clients on legal compliance and business strategy relating to privacy and security risk management, cybersecurity and technology transactions.

Incident response

We are able to draw upon our global experience to advise clients on the investigation, containment and remediation of a broad range of data breaches and other cybersecurity incidents and have acted in relation to many of the world’s most high-profile incidents in this area in recent years.

Minimizing financial loss and reputational damage is our highest priority, and we have an established reputation of achieving that objective for our clients. We frequently provide immediate incident response services across multiple jurisdictions and have advised clients in the context of cyber incidents with implications in over 120 jurisdictions and affecting many millions of individuals.

We know the key regulators well across a broad range of jurisdictions and have developed a deep understanding of those regulators’ priorities from a data protection, privacy and cybersecurity perspective.

In addition to assisting clients in their response to regulator investigations, we advise on class action lawsuits and other claims that arise out of privacy violations and security breaches. We are available to our clients on a 24/7/365 basis, and provide immediate assistance via our incident response team members across the globe.


Data protection

Filter articles

Data stream concept
Data Protection Report

Data protection legal insight at the speed of technology



Global Co-Head and US Head of Information Governance, Privacy and Cybersecurity
Global Co-Head of Information governance, privacy and cybersecurity; Partner
Global Co-leader, Digital Transformation Practice
Partner, Head of Technology, Co-Head of Information Governance, Privacy and Cybersecurity
Partner, Canadian Co-Head of Information Governance, Privacy and Cybersecurity
US Head of Technology and US Head of eDiscovery and Information Governance
EMEA Head of Information governance, privacy and cybersecurity
Head of Information governance, privacy and cybersecurity, Asia Pacific
Director, Head of Operations – Information Governance, Privacy and Cybersecurity
Global Head of eDiscovery and Information Governance; Head of Privacy, US

Related services