At Bird & Bird LLP, the large privacy and data protection team is ‘on top of cutting-edge trends‘. The group is noted for its sector-specific expertise in the advertising, financial services, pharmaceutical, luxury goods, sports, technology and telecoms fields, and consequently receives instruction from an impressive roster of household names in these areas. Ruth Boardman co-heads the firm’s international offering from the London office. James Moss utilises his previous experience as legal director of enforcement at the ICO to the benefit of his clients. Alex Dixie brings his ‘unique technical insights‘ to his role as head of the dedicated adtech practice. Gabriel Voisin and Elizabeth Upton are also key names in the department.

For the clients of Bristows LLP, ‘everything just happens in a very smooth way to a high level of satisfaction‘. Mark Watts heads up the data protection team, leveraging his particular expertise in managing global compliance projects and regulatory litigation. Marc Dautlich‘s practice focuses primarily on the technology and life sciences sectors, reflecting a broader firm-wide specialism. Alex Keenlyside is a key name for claims brought in relation to content, as is ‘standout data protection professional‘ Hannah Crowther. The group is well regarded for its strength in depth at all levels, with notable junior specialists including Jamie Drucker and Faye Harrison. In spring 2024, the department welcomed Julian Darrell, the former European head of litigation at TikTok.

The team at Dentons comprises a ‘really smart bunch of practical advisors‘ who take a ‘methodical and deliberate approach to tackling their work‘. London-based Simon Elliott acts as the head of data privacy and cybersecurity for the UK, Ireland and the Middle East, exemplifying firm’s cross-border focus. Antonis Patrikios is noted for his ‘timely and pragmatic‘ responses to both cybersecurity incidents and advisory issues. Nick Graham, the department’s founding partner, remains an active presence, assisting with international data transfers and adtech matters, as well as developing the AI piece. The group’s client roster includes a growing swathe of notable data and technology players, and is testament to particular strength in these fields. Of counsel Kuan Hon is another crucial member of the team; she is a member of the UK government’s International Data Transfer Expert Council.

Linklaters LLP enjoys a reputation amongst clients for providing ‘world-class advice on the most complex matters‘. Recent highlights for the team include representing well-known names in privacy enforcement actions, advising on innovative AI projects, and building out existing privacy compliance programmes to include cutting-edge technology. Richard Cumbley oversees the TMTIP group, and is regularly called upon to handle critical data breach incidents. Georgina Kon acts as co-head of the firm’s dedicated cybersecurity practice, and is the go-to contact for such work. The ‘wonderfully astute‘ Greg Palmer has notable strength in relevant litigation, while Peter Church excels at the intersection between technology and privacy law. Patrick O’Connell and Alaister Johnson are also recommended experts.

A&O Shearman was formed in May 2024 as a result of the much-awaited merger between Allen & Overy and Shearman & Sterling. The data protection team now fields a four-partner bench comprising the ‘approachable and available‘ Jane Finlayson-Brown; Nigel Parker; and ex-Norton Rose Fulbright cyber specialists Charlie Weston-Simons and Ffion Flockhart. The group is well versed in the gamut of relevant matters, both contentious and advisory, with regular mandates including regulatory investigations, breach responses, and post-incident disputes. AI has been an area of particular growth, with the practice seeing increasing instructions from notable names across the breadth of sectors.

The data protection, privacy and information security team at Baker McKenzie is recommended by clients as ‘terrific to work with‘ and is highly regarded for its ability to ‘provide risk-thoughtful advice‘. Vinod Bange helms the group, closely supported by Julia Wilson, who specialises in mandates straddling the employment and data spheres, and ‘subject matter expert‘ John McGovern. AI and other emerging technologies have been keeping the practice busy of late, as have cybersecurity incidents. On the contentious side, ICO investigations are a regular source of work.

At Clifford Chance LLP, a cross-practice group of specialists brings expertise to the gamut of data protection and cybersecurity issues, resulting in ‘an incredible unit of highly-motivated and skilled lawyers, from partners down to junior associates‘. Jonathan Kewley acts as the department’s global co-head, bringing his extensive expertise in data compliance issues to the role. Samantha Ward and Kate Scott are the key names for contentious matters, including regulatory investigations, while Herbert Swaniker stands out on the advisory front, and regularly assists with data transfer strategies and issues concerning emerging technologies.

CMS fields a ‘great bench depth of skilled advisors who can handle any task‘. Emma Burnett leads the data protection team, and is seen as a go-to advisor by household names spanning the retail, technology and media sectors. The group is particularly well regarded for its ‘deep knowledge and expertise in the field of cybersecurity‘, and is regularly instructed following breaches and other incidents. Other areas of activity include the data aspects of M&A deals and, more recently, innovative AI projects.

DLA Piper works with a host of leading domestic and international clients on a range of complex mandates, including data breaches, privacy litigation and multijurisdictional compliance, and enforcement matters. The pratice is chaired by Ross McKean, a highly experienced partner who serves as a key port of call to some of the firm’s most high-profile clients. Simon Persoff – who rejoined the practice in September 2024 – is noted for his focus on the financial services, insurance, life sciences, and technology sectors. Other key figures include contentious specialist David Cook; James Clark, recommended for his experience in life sciences, insurance, and government work; and Linzi Penman, whose recent focus areas include AdTech and app user journey issues.

Some of the largest technology, retail, financial services and life sciences businesses turn to Eversheds Sutherland (International) LLP, knowing that the team ‘understands the client well and tailors advice accordingly‘. The practice is well versed in AI, online safety, data and access issues which traverse data, competition, consumer and criminal law. Paula Barrett acts as the firm’s privacy, information and cybersecurity group lead for the UK, Europe, the Middle East, Africa, Latin America and Asia, as well as co-leading the global practice. Liz Fitzsimons is another key name, and is singled out as ‘a real expert in this area‘.

At Fieldfisher, Hazel Grant helms the technology and data practice, with a workload spanning compliance projects, international data transfers, binding corporate rules, data audits, and breach response. The group has wide-ranging sector expertise, and assists major names from fields as diverse as technology, financial services, retail and life sciences. Nuria Pastor is regularly instructed to act as an external data protection officer, while Renzo Marchini is a go-to contact for disputes relating to data. Summer 2023 was a time of growth at partner level for the team, with the promotion of Kirsten Whitfield, shortly followed by the arrival of Sarah Tedstone from Shoosmiths LLP.

The team at Latham & Watkins is seen by clients as ‘a pleasure to work with on high-profile, difficult matters‘, which regularly include incident response, privacy litigation and regulatory investigations and enforcement proceedings. London-based Gail Crawford co-chairs the firm’s global privacy and cybersecurity practice, an interdisciplinary group comprised of data and technology transactional specialists and experienced commercial litigators. On the contentious side, the ‘excellent‘ Ian Felstead is noted, while Fiona Maclean is recommended for relevant advisory work. James Lloyd is a key name for complex cybersecurity mandates.

At Norton Rose Fulbright, Marcus Evans leads the firm’s European data protection, privacy and cybersecurity group, while Jonathan Ball co-heads the EMEA-wide cybersecurity practice. Lara White is another key senior contact, and is singled out by one client as ‘a leader in her field‘. The firm regularly assists with the various issues sparked by the roll-out of data intensive products across multiple jurisdictions, as well as advising on global compliance policies and procedures; praise is given for always providing ‘innovative, practical solutions‘. On the cybersecurity side, breach response is an area of strength.

Pinsent Masons LLP fields a broad and deep bench of ‘industry-aligned lawyers‘. Jonathan Kirsop leverages his experience as head of the firm’s global TMT practice to bear on a range of data-related issues; David Barker leads the data privacy and media disputes group, and is consequently the key name for contentious mandates; and David McIlwaine oversees the cybersecurity piece. Recently, there has been a significant uptick in instructions from notable players in the financial services sector, as well as major insurers. In team news, ‘experienced privacy professional‘ Jaya Handa joined from Liberty Specialty Markets in July 2023.

At Ashurst, the team is particularly valued for its ‘strong grasp of the threat landscape and understanding of regulatory priorities‘. The workload spans both data advisory issues and breach response. Rhiannon Webster oversees the UK data privacy and cybersecurity group, with clients ranging from financial services companies to health providers. The relocation of digital economy practice co-head Amanda Ludlow from Brisbane to London in January 2024 served to further strengthen the partner bench on the ground.

DAC Beachcroft LLP‘s data, privacy and cybersecurity team is regarded by clients as ‘a seemingly bottomless well of knowledge, expertise and practical solutions‘. On the advisory side, the group has particularly strong connections with the public, technology, real estate and financial services sectors; in the last of these spheres, Jade Kowalski, who co-leads the practice, is noted for her ‘excellent insurance industry knowledge‘. Kowalski’s counterpart, Hans Allnutt, ‘is held in high regard for his expertise in pioneering defences to large-scale data breaches‘, and this kind of incident response work is another key strength of the firm.

At DWF, practitioners ‘get off the fence and provide practical and pragmatic advice‘. In terms of senior contacts in the London office, the ‘pre-eminent‘ Stewart Room is the global head of the data protection and cybersecurity practice, while ‘formidable and pragmatic legal mind‘ James Drury-Smith oversees the UK-wide offering. Manchester-based JP Buckley acts as the regional group head. The firm is best known for handling data-related class actions, advising on incident responses, and representing clients in regulatory investigations. The team is also highly regarded for its ongoing close relationship with the ICO.

Herbert Smith Freehills LLP‘s inter-departmental, cross-sector team is valued by clients for providing assistance which is ‘valuable both technically and commercially‘. Miriam Everett acts as the firm’s global head of data and privacy, while Andrew Moir oversees the global cybersecurity and data security piece. Christine Young takes the lead on employment-related data protection issues. The firm’s expertise covers matters ranging from strategic regulatory compliance, through contentious and non-contentious data subject rights requests, responses to regulatory complaints and investigations, and incident response.

Hunton Andrews Kurth LLP advises many of the largest multinational companies on complex data protection and privacy issues, both in the UK and globally. There is close co-operation between the London and New York bases, with Sarah Pearce and Aaron Simpson taking on the leading roles in each, respectively. The London office is also home to the firm’s privacy and cybersecurity think tank, the Centre for Information Policy Leadership, of which Bojana Bellamy is the President. The group’s ‘absolute specialists‘ are well versed in breach response work, as well as the data aspects of transactions. Seasoned expert Rosemary Jay continues to play an active role.

The ‘very capable‘ team at Mishcon de Reya LLP leverages the firm’s reputation in the litigious sphere to handle a breadth of contentious data matters, including investigations and class actions. Adam Rose heads up the data group, and receives frequent instruction from clients spread across the technology, gaming, real estate, publishing and broadcasting, financial services, and retail and leisure sectors. Senior adviser Jon Baines is a key non-lawyer contact. As a result of the merger with Taylor Vinters, the group’s partner bench was strengthened by the addition of specialists James Boyle and Ashley Williams.

Morrison Foerster‘s London office plays a key role in the firm’s global privacy and data security practice, with Annabel Gillham, who offers a ‘very sensible and pragmatic approach to problem solving‘, taking the lead on the ground. The team regularly designs and develops UK and global compliance programmes; advises on evolving areas of data protection law, including most recently children’s privacy and AI; responds to cross-border data breaches and investigations; and represents clients in related claims. Mercedes Samavi and Dan Alam are also key contacts.

Reed Smith LLP is valued by clients particularly for its ‘supremely pragmatic and measured‘ approach to the gamut of data work, with the firm’s regular caseload ranging from breach response, to compliance advice, to post-M&A assistance. The multi-disciplinary practice group comprises experts predominantly from the firm’s intellectual property, technology, media and litigation departments. Elle Todd is a senior name to note for regulatory investigations, while Carolyn Pepper is recommended for her disputes focus. Cynthia O’Donoghue and Philip Thomas round out the roster of key practitioners, with both demonstrating considerable know-how in international data transfers.

RPC fields a specialised data protection and privacy offering comprising dedicated expert groups, under the overall leadership of technology practice head David Cran. Relevant disputes work is overseen by ‘able, urbane lawyer‘ Rupert Cowper-Coles. ‘Really respected figure in the industry‘ Richard Breavington helms the cybersecurity side. Jon Bartley leads on advisory issues, including transactional support. In team news, January 2024 saw the arrival of Lindsay Warwick from an in-house position at Associated Newspapers Limited; her arrival further strengthened the firm’s already-recognised capabilities in the media-related data litigation space.

Clients are drawn to Stephenson Harwood‘s ability to ‘combine deep technical knowledge with business savvy in a way that provides unmatched value‘, and the firm consequently receives instructions from a plethora of high-profile industry leaders, particularly in the financial and professional services sectors. Data protection practice head Katie Hewson ‘lives and breathes her area of expertise‘. Michael Bywell is a key name for contentious work, including breach-related litigation, while Jenna Franklin is recommended for relevant transactional matters.

Taylor Wessing LLP‘s team has a ‘practical, real world and actionable‘ approach to mandates ranging from data compliance advice to breach preparedness and response. The firm’s clients run the gamut, from technology pioneers, early stage companies and fast-growing scale-ups, to well-established global players undergoing digital transformation changes. Christopher Jeffery leverages his position as co-head of the international US group to cater to key venture capital-backed businesses looking to expand internationally. Newly-promoted partner Michael Yates, Jo Joyce and Ed Spencer jointly oversee the dedicated cybersecurity offering. Victoria Hordern rounds out the roster of key contacts.

Tim Hickman heads up both the local and global data, privacy and cybersecurity practices at White & Case LLP, leveraging this position to ‘coordinate efficiently with other countries’ colleagues‘ and provide a seamless international approach to data mandates. The firm has core strengths across the advisory, regulatory, transactional and litigious spheres. John Timmons ‘always finds practical and commercially attractive solutions‘, and regularly handles cybersecurity matters, including both compliance and breach response.

Bates Wells is differentiated by its standout know-how in relation to the charity and not-for-profit sector – where Lawrence Simanowitz and Hannah Lyons are just some of the key contacts – and its expertise in matters relating to electoral data use. Practice head Eleonor Duhs, whom clients regard as being ‘amazingly experienced and well connected‘, is regularly involved with legislation drafting, and is consequently well placed to advise on emerging technologies, including AI.

Boutique firm BCL Solicitors LLP ‘knows the intersection of business, regulation and criminal enforcement like no other‘, and brings this to bear on its data work, which predominantly focuses on investigatory powers and surveillance law. Team lead Michael Drury leverages his experience as the former legal director of GCHQ to offer clients ‘a level of legal and technical understanding that no one else comes close to‘. Julian Hayes is another key senior contact.

Bryan Cave Leighton Paisner‘s data privacy and security group provides ‘professional and insightful advice‘ to well-known players from a range of sectors, including financial services, media, real estate and technology. The practice is highly regarded for its expertise in assisting with data subject access requests, and has lately been involved with a large number of cross-border breach responses. Data compliance specialist Geraldine Scali further boosts the team. Former practice head Kate Brimsted has left the firm.

Anchored within the firm’s wider commercial group, Charles Russell Speechlys LLP‘s data protection team draws on specialists from a range of departments, including employment and litigation, to provide a rounded offering. Janine Regan re-joined as practice head from Norton Rose Fulbright in May 2023, and now handles a workload ranging from global data protection compliance projects, to privacy impact and legitimate interests assessments, to international data transfers. Victor Mound, who joined from Bristows LLP in August 2023, provides key support.

Covington & Burling LLP handles the full range of contentious and advisory data privacy and cybersecurity work, from compliance, through to policy and strategy, and breach response. The team is best known for its its regulatory expertise, which includes representing household name clients in investigations. In terms of sector specialisms, the pharmaceutical, biotech and medical devices industries are particular areas of focus. Mark Young leads the group, working closely with Lisa Peets.

Mayer Brown International LLP‘s cybersecurity and data privacy team provides ‘brilliant advice‘ on incidents and breaches, as well as compliance and governance issues. The firm’s expertise in the financial services sector ensures that the group is particularly well placed to assist major names from that space. Mark Prinsley and Oliver Yaros oversee much of the work, and the latter is singled out by one client for providing ‘effective, timely and intelligent support‘.

Orrick, Herrington & Sutcliffe (UK) LLP‘s cyber, privacy and data innovation practice handles a substantive workload comprising both contentious and advisory mandates, including investigations, incident response, enforcement action and relevant litigation, as well as compliance. The team includes Alex Sobolev, who is typically instructed by technology-led companies, and cybersecurity-focused Adele Harrison. Former practice head Kelly Hagedorn has left the firm.

Clients of Ropes & Gray LLP benefit from the London data, privacy and cybersecurity team’s close cross-Atlantic collaboration with colleagues in Washington DC. Compliance, advisory and enforcement matters relating to the collection, storage and processing of data all make up part of the regular practice, as, increasingly, does breach response work. ‘Great leader‘ Rohan Massey helms the UK offering, closely supported by the ‘engaging, knowledgeable and well respected‘ Edward Machin.

The privacy and data team at Shoosmiths LLP is seen by its clients as ‘one of the best kept secrets in the London market‘. Practice head Sherif Malak is ‘beyond dedicated to his craft‘, and has a strong focus on mandates with a nexus to the technology sector. Many of the group’s practitioners receive regular instruction to act as external data protection officers, including Nick Holland and Hamish Corner. Lately, the department has been increasingly focusing on the contentious side of its data work.

Sidley Austin LLP‘s data protection team in London forms an integral part of the firm’s global privacy and cybersecurity practice, and is particularly active on behalf of clients based across the UK and EU; William Long acts as co-chair of the international offering, as well as leading the UK and EU branch. The regulated industries, particularly life sciences and financial services, are key areas of focus. Francesca Blythe is singled out for her ‘pragmatic approach‘.

‘Fantastic and pragmatic‘ practice head Gareth Oldale oversees the data, privacy and cybersecurity offering at TLT. Recently, the group has been particularly focused on growing its client base in the financial services and public sectors, which are core areas of focus, and advising on both generative and more traditional AI projects. In team news, Louisa Williams was promoted to partner in May 2023, and Chris Elwell-Sutton joined the firm two months later from the Canadian Imperial Bank of Commerce, where he led the privacy programmes in the Europe and APAC regions.

Travers Smith LLP‘s technology and commercial transactions team, helmed by Dan Reavill, advises a wide-ranging roster of notable clients on all aspects of their data protection compliance, including sharing arrangements and impact assessments. Cross-border data transfers are a particular area of expertise, and are regularly handled by experienced practitioner Louisa Chambers. James Longster and Sarah Robinson are singled out as ‘experts in their field‘.

The practitioners at Wiggin LLP are valued particularly for their ‘real sector expertise in betting and gaming which they can bring to bear on a case‘; industry giant consequently instruct the firm to advise on the gamut of data protection issues. Lately, matters regarding the Children’s Code and AI have become particularly prominent among the team's workload. Patrick Rennie oversees the group, and ‘knows how to steer the ship‘. The ‘incredibly bright‘ Christina Henry is another key contact.

Harnessing its expertise in the financial services, retail and hospitality, technology, and energy sectors, Womble Bond Dickinson (UK) LLP‘s data team handles a breadth of contentious and advisory work on the instruction of household name clients from these fields. The firm has a strong regional presence, with key team members including Southampton-based Andrew Kimble, compliance guru Sarah Daun in Newcastle, and the ‘dynamic and responsive‘ Katie Simmonds in the London office.

At Clyde & Co, there is a concerted focus on cybersecurity, and the firm is well placed to handle issues from strategy to breach; the London office is home to both Ian Birdsey, who co-leads the global practice, and Helen Bourne, who helped to develop the UK-wide offering. On the data-related commercial and compliance side, Mark Williamson is the key senior contact.

Cooley (UK) LLP is well versed in the full range of cybersecurity, data and privacy mandates; compliance advice, regulatory investigations, breach response and related litigation all form part of the regular workload. Guadalupe Sampedro leads the team in London, working closely with colleagues in New York, Washington DC and Brussels. In terms of sector-specific expertise, the firm is best known for its knowledge of the life sciences, financial services and technology industries.

Data protection, AI and digital regulation boutique Digiphile Services Limited was founded in January 2023 by ‘privacy legend‘ Phil Lee, and the new outfit ‘while small, packs a punch‘. The firm has rapidly built up an impressive client base, particularly in terms of notable global technology players. International data transfers, online profiling and AI are just some of the current areas of focus.

Farrer & Co‘s data protection and information law practice, helmed by Henry Sainty, encompasses both a disputes and a commercial advisory team, ensuring that the firm has ‘an expansive stance when supporting clients‘. The litigious side is overseen by ‘deeply experienced data privacy practitioner‘ Ian De Freitas. In terms of non-contentious work, international data transfers, processing agreements and governance issues are all regularly handled.

Clients of Goodwin ‘get white glove service from highly intelligent professionals’, with services ranging from transaction-related advice and incident preparedness assistance, to defence of class actions and regulatory enforcement actions. Gretchen Scott, who was one of the forces behind the establishment of the privacy and cybersecurity department, is instructed by a broad roster of notable names, and has extensive expertise in both UK and EU data issues.

The team at Lewis Silkin has recently been renamed to reflect a growing focus on cybersecurity work, in addition to its more established data and privacy strengths; newly promoted partner Ali Vaziri is spearheading this area. The group is particularly well regarded by clients from the technology, financial services, retail and advertising sectors. Alexander Milner-Smith and Bryony Long jointly helm the department, while Tom Ford is a key name.

The team at Mills & Reeve LLP provides ‘excellent technical knowledge coupled with real-world commercial experience‘ which spans compliance advice, innovative technology, international data transfers, and security breaches. Jagvinder Singh Kang ‘remains at the top of his game‘, leading both the national and international practices. Helen Tringham is the name to note for contentious work.

At Pillsbury Winthrop Shaw Pittman LLP, a change in leadership recently saw Steven Farmer promoted to co-chair of the firm’s global cybersecurity, data protection and privacy team, as well as leader of the UK and EU taskforce. The group is particularly well regarded for its data transfer expertise. Other areas of focus include digital health-related AI work, regulatory advice, and breach response.

Freeths LLP stands out for its equal spread of data protection work across the advisory and contentious spaces; in the former arena, strengths include assisting with international data transfers and sharing arrangements, while in the latter, the firm regularly handles disputes arising from data breaches. Luke Dixon chairs the department, with William Richmond-Coggan taking the lead on the litigious side.

Gibson, Dunn & Crutcher is valued by clients for providing comprehensive advice on regulations and industry best practices. Joel Harrison co-chairs the privacy, cybersecurity and data innovation practice, leveraging ‘the most extraordinary knowledge of both technology and the law’ to do so. Robert Spano co-chairs the firm’s dedicated AI group. International data transfers, breaches and disputes are all areas of strength.

Gowling WLG‘s UK data protection and cybersecurity department is jointly headed up by Jocelyn Paulley and recent arrival Loretta Pugh, who joined from CMS. Recent highlights for the practice have ranged from assisting with relevant elements of transactions, to advising on direct marketing issues, to handling breach-related disputes.

At Harbottle & Lewis LLP, Anita Bapat leads on the data protection and privacy side, while Emma Wright oversees the cybersecurity offering. The firm is particularly known for its expertise in the marketing, adtech and digital media fields, and is regularly instructed to advise on overlap with data issues; Sacha Wilson‘s cross-departmental advertising group takes on the bulk of such work.

Kingsley Napley LLP is best known for its contentious focus, and this extends to the firm’s data protection and privacy offering, which is most lauded for its expertise in disputes and investigations, as well as representation of high-profile individuals in relation to their data rights. Emily Carter, noted for handling regulatory actions, and seasoned litigator Melanie Hart oversee the work.

Morgan, Lewis & Bockius UK LLP advises UK, European, and global companies on transactional data privacy requirements, cybersecurity issues and regulatory matters, including breaches and data sharing arrangements. Vishnu Shankar, who splits his time between the firm’s London and Brussels offices, is instrumental in ensuring close co-operation between the two hubs, and a consequent global approach to the work.

Boutique firm Pritchetts Law is seen by clients as being ‘genuinely unique in that it comprises individuals who are dedicated and are pre-eminent experts in this area of law‘. The team handles the gamut of data protection and cybersecurity issues, and has recently been increasing its focus on AI-related issues. Senior contacts Stephanie Pritchett and Ben Wootton ‘continue to punch above their weight‘.

PwC LLP brings a ‘detailed understanding of complex privacy topics‘ to a cross-border roster of data protection mandates. Chris Cartmell ‘leads this team in an excellent manner‘, and regularly assists with international data transfers and breach responses. Sarah Gee is a key contact for clients from the financial services, fintech and technology sectors.

Under the leadership of ‘first class‘ Eitan Jankelewitz, the team at Sheridans advises on regulatory and strategic data issues, and related commercial considerations. Stefano Debolini is the key name for technology clients. Antonia Gold, who splits her time between the London and Berlin offices and is dual qualified in the two jurisdictions, provides significant cross-border expertise.

Squire Patton Boggs handles the gamut of regulatory, commercial and cybersecurity issues pertinent to data-driven clients, both domestic and international. As well as assisting with relevant issues surrounding transactions, the team regularly handles regulatory investigations and data disputes. David Naylor leads the UK-based data privacy, cybersecurity and digital assets group, as well as co-chairing the EMEA-wide practice.

Stevens & Bolton LLP fields a ‘very knowledgeable team with broad expertise‘ across the data protection space. Practice head Beverley Flynn is particularly known for her work with retail, manufacturing, life sciences and energy clients, and her approach ‘is characterised by a thorough understanding of the sectors she advises on‘. The team’s recent highlights have included breach response, AI-related advice, and data transfers.