Data Protection Solicitors

Data Protection in the UK is underpinned by the retained General Data Protection Regulation EU (UK GDPR) and the Data Protection Act 2018 which means that businesses must not only operate and use personal data in line with established data protection principles, but also be able to demonstrate legal compliance.

Our experts work with clients of different sizes and sectors to provide effective, proportionate and affordable compliance solutions. 

The mandatory requirement for specific terms and conditions to be put in place where a processor provides relevant services to a controller can seem daunting.

However our experienced team provide a range of assistance and documentation to aid your business with its compliance.

We can advise you about whether you have responsibilities under data protection laws as a controller or processor and what the implications are for your business. 

We can undertake, draft and advise on:

• Data Mapping Exercises. We map the journey of personal data within your business including where data is sourced from, stored, processed, transferred, accessed and used to evaluate your current practices and procedures;
• Data Subject Access Requests (DSARs). We can advise you on how to respond to DSARs, and draft policies to help train and guide your workforce on best practice when dealing with and responding to DSARs;
• Privacy Notices. We can draft Privacy Notices to cater for the processing of personal data across your business, including employee data, customer or supplier data, or from any online offering;
• Data Protection Impact Assessments (DPIA). The UK GDPR has prescriptive requirements on what entities are required to conduct DPIAs. We can advise you on such obligations, and draft a DPIA tailored for your requirements;
• Data Sharing and Processing Agreements. The UK GDPR requires standard terms to be in place between those sharing and processing personal data. We can draft Data Sharing and Data Processing Agreements for your purposes, including international transfers of personal data compliant with UK and EU data protection laws; and
• Direct Marketing - Data protection laws in the UK are supplemented in the context of electronic marketing by the Privacy and Electronic Communication Regulations (PECR). We can advise you on your direct marketing activities and offer practical guidance on how to comply with the PECR and other data protection law requirements.

Many organisations will regularly transfer personal data outside of the UK and the EU, sometimes unwittingly, for example if your business engages technology providers for cloud computing services, they may store data overseas.

Data protection laws restrict the transfer of personal data outside of the UK or the EU unless appropriate safeguards are put in place to ensure that the personal data is processed in a lawful and secure environment.

This issue can be particularly relevant to organisations which are members of a multi-national group or where business partners or suppliers are based outside of the UK and/or the EU.

For further guidance on the measures that should be implemented when making transfers of personal data overseas, please see our recent article on Standard Contractual Clauses.

• Myerson Solicitors' IT lawyers can provide businesses with extensive legal advice and support on a wide range of IT-related matters.
• We are highly skilled in matters relating to data protection, ensuring that businesses comply with relevant legislation such as the General Data Protection Regulation (GDPR).
• We can also provide expert guidance on software licensing, reselling, and development.
• Other areas of expertise include e-commerce, intellectual property, and technology-related disputes.
• Working with Myerson Solicitors means you'll have access to legal experts who can support and help your business stay ahead of the curve in today's ever-evolving digital landscape.
• An alternative to the major, regional, and national firms by offering high-quality Technology law advice from specialist solicitors, but on a much more cost-effective basis.
• By working closely with our IT clients, we can ensure we meet their expectations regarding business operations, providing clear and specialist expertise. We are easy to deal with and understand that a common-sense approach is often required.
• Extensive experience in dealing with a broad range of IT disputes, such as data protection and software development issues, giving businesses fast and helpful advice based on knowledge of your business, its history, and pressures.
• A partner-led service and a genuinely accessible team of experienced IT law solicitors due to our size, structure, and unique culture.