Almost every business today handles commercially sensitive information, personal data or big datasets. Businesses are also increasingly adopting AI technologies, which introduce their own risks and governance opportunities.
At a time when regulators around the world are keeping a close eye on data protection standards and planning further regulation concerning the use and transfer of sensitive data, data governance and AI, it's essential you stay ahead of major changes to protect your business. Appropriate data handling and a robust cyber security strategy are also crucial to avoiding risk and reputational damage as cyber attacks continue to increase around the world.
Our specialist Data Protection and Cyber team is one of the biggest in Europe and has over 20 years of experience helping businesses solve their data and cyber challenges. We act for a range of clients at the heart of the data economy, helping them navigate the legal challenges that come with technology, data, and its transfer across borders.
This includes advising on the digital regulatory environment developing across Europe in the shape of the Data Governance Act, Data Act and AI Act, as well as data space regulation like the European Health Data Space, Finance Data Space, NIS 2, Cyber Resilience Act, DORA and the rules in the UK.
We can help you handle:
We'll provide you with real world risk management and insight gained through our longstanding relationships with national regulators across Europe and worldwide, so you can operate your business in confidence.
Areas of focus
GDPR compliance Cyber security & data breaches Data Governance External Policies & Practices HR Data Health Data Data Exports New Digital Products & Data Privacy Agreements & Transactions Data Subject Rights Dealing with DPAs ePrivacy (cookies) Marketing & DataWe acted for a UK listed company on the theft of data and subsequent ransom of the company. We obtained an injunction against the hackers (PML v Persons Unknown) for the client, which was the first-time judgment had been obtained for a listed company against hackers in which anonymity was granted to the company in relation to the interim injunction and then on a permanent basis. The team co-ordinated the entire incident response, including instructing forensic IT and working heavily with UK cybercrime police.
Press releaseAn international car rental group in the negotiation of numerous key IT contracts as part of a major project relating to connected services.
A Nordics based multinational in the business services sector in the handling of a major data breach involving sensitive data of their Dutch employees.
Just Eat on on its global data protection law compliance project, including multiple challenging jurisdictions such as French data protection law.
A US based company, involved in the development of new therapies for patients with severe neurological diseases affecting movement, in a clinical study involving sensitive genetic data.
A global e-commerce platform on the establishment of a Netherlands entity, localisation of applicable terms and legal document suite and their overall GDPR compliance.
Latest news & insights
The IAF's process to help address GDPR lawfulness in AI development and use: how to demonstrate a legitimate interest
Abolition of the ODR platform - adaptation needs and prospects for ADR reform
by multiple authors
EDPB at a glance: Guidelines 01/2025 on Pseudonymisation
by Stephanie Richter, LL.M. (Torino), CIPP/E and Maximilian Maisch
ECJ tightens standards for the criteria of necessity
Online Safety Act compliance is coming
On 11 January 2024, the Data Act, new EU legislation to harmonise the regulation of the data economy, entered into force. It contains rules on access to and fair use of data to make it more accessible to all involved in its generation and promote data-driven innovation. Most of the Data Act becomes applicable from 12 September 2025. The Act has far-reaching consequences for the engineering and plant construction industry.
Environmental, Social, and Governance (ESG) issues are not just checkboxes to be ticked; they represent critical demands and opportunities that will shape the future of businesses and communities. At Taylor Wessing, we are committed to helping you go beyond mere compliance, focusing on building more resilient and sustainable economies for a brighter future.
Please feel free to contact any of the people listed here for more information about our capabilities and their expertise. You can also search for a particular individual or see the whole team by using our people finder.
Tools & online services
Global Data Hub
Our data protection microsite, is a one-stop shop for up-to-date, international information on data privacy law, offering practical insights, thought leadership and guidance on data protection law. All content on the Hub is available for free and receives over 30,000 visitors a month. We have added a wealth of GDPR-specific articles and a number of GDPR checklists supported by a bank of virtual learning webinars to help clients with their preparations for implementation.
TW: Cyber Response
Our data breach mobile app helps organisations prepare for and respond to data breaches. Organisations will face potential multi-million pound fines for data breaches after 25 May 2018. TW:Cyber Response provides practical assistance to help clients prepare for and manage breaches as effectively as possible, to minimise their exposure to regulatory action, litigation risk, and reputational damage. The app is available to download from the App Store and Google Play Store.
Interface
Analysis and exploration of legal and commercial issues in tech, IP, media and related sectors.