Data Protection

Data protection is an issue that cannot be ignored, especially ahead of the implementation of the General Data Protection Regulation (GDPR) in May 2018. Our highly experienced data protection team advises on a broad range of complex data protection issues. 

The significance of data protection continues to grow and raises issues of fundamental importance to individuals, businesses and organisations.

The financial and reputational damage caused by a data breach can have devastating consequences to businesses and organisations. Meanwhile, the breach of an individual’s information rights can have a significant impact upon their personal and professional lives.

How we work with you

Kingsley Napley helps individuals and business negotiate this complicated area of law, ensuring personal data is protected and helping to manage the consequences when it is not.

Our specialist team advises in a wide range of circumstances including:

  • dealing with cyber security and data breaches
  • secure data handling and transfers
  • dealing with subject access requests
  • outsourcing issues and carrying out data protection audits.

We also advise on all aspects of compliance and policy development and enforcement.


There is a myth that data security is only the responsibility of a few people in the organisation responsible for IT.  That is not the case.  Data protection policies should make it clear that the protection of personal and sensitive personal data is the responsibility of all staff, and this is not just limited to electronic information.  It is important to remember that people are still the greatest single reason for data security breaches.

Dealing with a data breach of any nature can carry significant risks, whether you are an individual or a business. We will work closely with you to develop a deep understanding of the issue and what you hope to achieve, advising you of an appropriate approach and the likely outcomes.   

Our data protection team comprises individuals from a wide range of disciplines including public law, employment, corporate and commercial, criminal litigation, immigration, and regulatory, providing you with properly targeted, well-rounded and expert advice.

Data Protection Comment

View all


Data Protection – 10 further top tips for responding to subject access requests

The Queen’s Speech 2017 – Setting the parliamentary agenda

More to do on cyber-security: half of UK businesses suffer cyber-security breach

Data Protection – even MORE practical guidance from recent case law on subject access requests

Further chinks in the armour? EU-US Privacy Shield and the concerns of MEPs

Patient confidentiality in the spotlight

The GDPR: What do employers need to be doing now?

Entrepreneurs and small businesses need to prepare now for the new data protection regime

The first challenges to the EU-US Privacy Shield

Data Protection Regulation blog series

Coming clean on data security breaches

Doctors’ privacy rights: GMC wrong to disclose information to patient

EU-US Privacy Shield

UK: ICO guidance confirms "GDPR firmly on Brexit agenda"

Thinking of taking your employer’s confidential information to a competitor? Think twice.

Further update: EU-US Privacy Shield

April Update: EU-US Privacy Shield

New Information Commissioner announced

March Update: EU-US Privacy Shield

Press stop on poor mobile working practices

Information Commissioner calls for stronger sentencing powers

"EU-US Privacy Shield” – a Safe Harbour mark II

EU Data Protection Regulation: Here at last…well, nearly!

A bitter pill: Hard lessons learnt by online pharmacy fined for selling customer data

Safe Harbor tsunami: a data transfer blockade

Police powers: common law and disclosing information

Google Spain redux – removing search engine links to stories about removing search engine links

Effective data security: The time to act is now

Information law update: Subject access requests and the dilemma for data controllers

Website hacking: Ashley Madison users left wondering who they can trust

Information security breaches: A near certainty

European Parliament demands legal communications are protected from surveillance

Close Load more

Let us take it from here.

+44 (0)20 7814 1200

Skip to content Home About Us Insights Services Contact Accessibility