Data protection and privacy

We have found the team to be knowledgeable, responsive and understanding of our business needs.

Dan Berger, Zeta Interactive Corporation
Data Protection

Latest news & insights:

Our specialist data protection and privacy team advises a broad portfolio of global clients. Through our significant knowledge of this evolving field of law and its practical application by regulators, we are able to adopt a pragmatic, solutions-focused and efficient approach in a highly technical area.

Data protection and privacy laws affect almost all businesses. The issues they raise can be both complex and far-reaching and the penalties for non-compliance are becoming increasingly severe. In addition, exploitation of big data and open data provides growing opportunities which need to be handled in accordance with these laws.

Our data protection and privacy team has a wealth of experience in all aspects of UK data protection and privacy laws, including data security, cross border transfers, consent issues, data controller/processor issues, e-mail marketing and social media campaigns and subject access requests. We draft and advise on privacy policies, data collection processes, data management policies, data sharing agreements and international data transfer agreements. Members of our team also offer expertise in the privacy rights of individuals, including applying for and defending privacy injunctions, and freedom of information laws.

Our clients include international listed and private corporations, charities, professional regulatory bodies, professional services firms, educational institutions and individuals. In addition, our lawyers provide technical training and seminars for in-house counsel and marketing/operational teams on practical aspects of the data protection and privacy regime in the UK.

We offer expert advice on:

  • data collection and retention policies
  • cyber security and cyber crime
  • security breaches and breach management policies
  • subject access requests
  • cross border data transfers
  • data protection audits and advisory services
  • website privacy policies
  • digital marketing
  • handling of employee data
  • privacy injunctions and privacy rights
  • Freedom of Information Act and Environmental Information Regulations

Recent work highlights

‘Big data’ analytics service provider

Advising on data anonymisation and handling under the EU data protection regime and on customer contracts and international data transfers.


Leading digital media and publishing business

Assisting a top digital media and publishing business on its privacy policies and related data protection issues.


Global consultancy firm

Acting on the management and mitigation of a data security breach, including drafting a notification to the Information Commissioner and future remedial actions.

Related expertise

Latest tweets by @penningtonslaw

Penningtons Manches LLP

Penningtons Manches LLP is a limited liability partnership registered in England and Wales with registered number OC311575 and is authorised and regulated by the Solicitors Regulation Authority. San Francisco is an associated office.

Penningtons Manches LLP