Case studies

Data protection risks


We regularly advise UK plcs and other entities on the data protection compliance obligations relating to the many consumer and HR records that they hold.

One high profile client in the drinks sector has millions of customer records on its marketing database and sees good data handling processes as important to maintain the value of its brand. Other clients have different motivations. For example, we advise several bodies who act as regulators to professionals in different sectors, such as in healthcare services, on how to respond to freedom of information and data protection requests. We help resist complaints that a purported breach of the data protection rules has resulted in unfair decision making on the part of the regulators. We also draft privacy policies and advise on international data transfers.

 Clients find that proactively addressing their data compliance obligations is cheaper and easier than doing so in response to adverse publicity or a complaint.


Return to case studies

Penningtons Manches LLP

Penningtons Manches LLP is a limited liability partnership registered in England and Wales with registered number OC311575 and is authorised and regulated by the Solicitors Regulation Authority. San Francisco is an associated office.

Penningtons Manches LLP