Regulation of personal data has been dramatically expanding on a global basis. Companies processing data of hundreds of millions of data subjects as well as small start-ups - all are required to spend significant resources on understanding and implementing the constantly evolving legal challenges.

We guide our clients on all matters relating to their data usage and assist them in navigating the numerous data protection regimes, in all the jurisdictions in which they operate. Key aspects we advise on include:

• Cross-border data transfers; multi-jurisdictional transfer impact assessments;
• Data processing and data transfer agreements;
• Data usage and monetization;
• Data protection compliance policies and audits;
• Various privacy laws, including the GDPR; UK GDPR; LGPD; US states privacy laws (including the CCPA, CPRA, CPA, VCDPA, SHIELD act and more) as well as federal laws (such as HIPAA, COPPA, PIPEDA and more);
• Data subjects’ rights and access procedures;
• Data breach incident handling, including mitigation, response, reporting and auditing;
• Data protection impact assessments and legitimate interest assessments;
• Privacy compliance training;
• DPO services;
• Privacy notices and policies;
• Marketing policies;
• Automated decision making;
• Employee privacy;
• Financial privacy;
• Healthcare privacy;
• Children privacy;
• Data and privacy due diligence and warranty negotiation for M&A and strategic transactions.