Cyber security & data protection law
Canada Click to see Advertising & Product Regulatory navigation
We are now living in a new world of technology and data. They are essential to both a business' operations and its success. However, as innovations move forward the challenges that these assets present will only increase. Cyber attacks, special/sensitive data and data privacy regulations like GDPR are a worry for all businesses. The risk of financial loss and reputational damage is extremely real. Our team of cyber security and data protection lawyers takes a pro-active approach to safeguarding your world. We will work with you to both reduce any potential risks and manage them when they arise.
We have extensive experience advising national and international clients on their data protection, privacy and cyber security needs. Our team of legal professionals can help you strengthen your cyber security defences, protect your data and manage cyber breaches.
If you are in need of help or advice in this area, contact us today.
Expertise in Cyber Security and Data Protection Law
International data breach strategies
The introduction of the GDPR has seen a surge in breaches being notified to regulators and many further breaches being reported in the media.
Data Protection: GDPR – where are we now?
Cyber security and data protection services
Data privacy compliance
We ask the questions that you didn't know you needed to. Making sure you stay compliant with global and domestic data privacy regulations, we help your business to have everything in place. From training and policies to privacy and data management protocols, we help you to prepare for issues before they appear.
Cyber crisis management
In the event of a cyber-attack, you need to avoid financial, legal and reputational damage as much as possible. You need to know you have got support around you that has expertise and experience. Our priority is the best possible outcome for our clients. Our team of cyber security lawyers can advise you on reporting obligations, insurance considerations, potential class-action liability and managing investigations.
We cover all aspects of litigation concerning cyber security and data protection. From helping you settle on favourable terms or recovering damages and data, we can help develop a robust litigation strategy. Our approach will carefully assess the facts, your business objectives and the defences available to you.
No business wants to have a data breach. Apart from the potential regulatory penalties and reputational damage, there is also a risk of losing valuable information, time and revenue. Since the General Data Protection Regulation (GDPR) and mandatory breach reporting under the Personal Information Protection and Electronic Documents Act (PIPEDA) came into force, regulators have seen a surge in data breaches being reported to them. Our dispute resolution experts can work with you to decrease the risk and impact of such an incident.
We can assist you with incident response planning, staff training and reviewing policies and processes. In the event of a breach, we can also help you fulfil reporting obligations, conduct investigations and take remedial action.
Data subject access requests (DSARs)
Requests for personal information/DSARs made to organisations under privacy laws such as the GDPR and PIPEDA are becoming increasingly common and can be difficult to handle. Our data protection solicitors can help you with DSARs and guide you through the process. Working in partnership with leading IT services providers, we give you access to a dedicated support team to help reduce time and cost.
Our services include helping you plan for DSARs through suitable processes and training. We can also advise on data collection and search methodologies as well as how to manage requests themselves.
Privacy notices and policies
Getting privacy notices and policies right is critical to any data protection and processing activity. We can support you in drafting these documents and keeping them updated as requirements change.
Data compliance audits
Our data protection audits assess your business to identify any issues that need to be rectified from a compliance perspective. We review your current processing activity and procedures and make recommendations based on the most up-to-date legislation.
IT threat assessments
A strong technical framework is just as important as having the correct data management policies. We work with experienced IT providers to rigorously test your systems. Using penetration testing, compliance reviews and social engineering security assessments we will help you to conduct gap analysis.
Contract negotiations and data sharing agreements
When data needs to be shared between parties, it is essential that the appropriate agreements are in place to safeguard your business. We can support you with contract negotiations with data controllers and processors, as well as third party service providers. We can also assist with negotiating and structuring Data Sharing Agreements.
Privacy laws will often set out how personal data can be transferred between jurisdictions. Our team can advise you on the action you need to take to ensure compliance with the relevant data privacy laws for the data you hold.
An experienced data protection and cyber security law firm
Online ticket company
Advised on a security incident involving customer data. Provided counsel on the data breach and PCI compliance, as well as implementing a breach response plan. Notified and liaised with data protection authorities and customers on behalf of the client.
Advising international financial institutions in data breach crisis management and using new technologies. Advising on credit card operations, including cross-country reviews of consumer protection.
Assisting with advice around data protection, the Freedom of Information Act and the Environmental Information Regulations. Rolling out data protection compliance programs and training internal data protection advisors.
Loss of data
Advising many companies on data breaches caused by loss or theft of physical records, incorrect security settings or admin errors.
Acting for some of the largest global technology companies on specific privacy issues relating to their latest innovations and other aspects of data protection compliance, such as the international transfer of data.
Advising a major airport on drafting agreements for IT procurement projects that were essential to the digital transformation of the business.
The international council of shopping centers
Carrying out a data protection audit, as well as creating and updating data maps, privacy notices, policies and terms and conditions.
Retail and web-based companies
Advising on remote data storage, privacy policies, information collection, employee data and anti-spam laws.
Health services provider
Provided cyber breach coaching services and coordinated notifications after the client had experienced unauthorised access to their cloud storage system.
Expertise in the field
They are the go-to firm for legal advice... they also have a nice way about them and are extremely approachable. Chambers UK
In the UK, Gowling WLG was recognised as 'Firm of the Year (Outside London)' by the Legal 500 Awards in 2019 for Technology, Media and Telecoms. Our Canadian team were also recognised in 2019 by Chambers Canada and the Canadian Legal Lexpert Directory for their work in technology. The Best Lawyers in Canada 2019 recognised the team for its work in technology law and privacy and data security law.
We have been advising on data protection legislation since such laws have existed. Our international team brings together specialists from a range of areas to provide an all-encompassing cyber security and data protection practice.
Our level of experience allows us to give advice that understands how data protection standards should differ across industries. Our cross-sector and cross-border work gives us knowledge with a high level of detail but a broad perspective.
Government Contracting & Public Sector
Financial Institutions & Services
Education/Universities
Our team of data protection lawyers spans across multiple jurisdictions. As information security and data privacy become more prevalent, your reputation and finances hang in the balance. Ensure you have practical and experienced counsel on hand to support you with your compliance and to guide you if the worst happens.
If you are seeking advice regarding data protection and cyber security, please do contact our team today.
Helen Davenport
Partner (UK)
Helen leads the firm's UK Data Privacy and Cyber Security team. Her particular areas of expertise are handling data loss and other cyber security incidents. She advises clients on data subject rights, including handling DSARs and data privacy litigation. Helen is also a highly experienced technology litigator and her practice also includes advising on disputes arising from contracts for IT systems and services and software licensing matters.
Meet the rest of the UK team
Wendy Wagner
Partner (Canada)
Wendy leads the firm's Canadian Privacy & Data Protection Group. Her practice focuses on international trade law, as well as privacy, access to information and defamation law. In her privacy practice, Wendy advises companies on privacy compliance and data protection issues.
Meet the rest of the Canadian team
Partner (Singapore*)
Sheena has extensive experience in the privacy field. She advises on privacy and data protection issues in Singapore and the Asia Pacific region. She has experience in managing multiple data breach incidents for clients.This involves working with computer forensics teams, participating in crisis management, reviewing the customer communications and engaging with the regulator. Her experience in data breach advice and management spans the technology, healthcare and retail sectors.
*Exclusive association with JurisAsia LLC
Manuela Finger
Partner (Germany)
Manuela is an Intellectual Property (IP) partner specialising in soft IP, information technology and commercial matters. She advises clients on compliance and protection of personal data and data security. Manuela's work includes data protection audits, advising on security incidents and structuring of processing of data in multinational groups of companies.
Danhoé Reddy-Girard
Partner (France)
Danhoé's work focuses on banking & finance, real estate and compliance. In his compliance practice, he advises organisations on complying with the GDPR. He drafts contracts, policies, privacy notices, records of processing activities and audit reports.
Tony Fielding
Partner (UAE)
Tony is Head of Technology in our Dubai office. He is responsible for advising local and multinational clients on a range of technology, media and communications projects.
Le Rong
Director (China)
Rong heads the non-contentious team in China. Her work includes advising European clients on acquiring Chinese companies, e-commerce and negotiating a broad range of commercial contracts.
Meldir Erbulekova
Associate (Russia)
Meldir provides specialised legal support for cross-border e-commerce and international e-business. She advises clients in a variety of technology and data privacy matters which arise in cross-border e-commerce. Her focuses include e-commerce and internet regulation, data protection and cyber security.
View our full team
Keep up-to-date with the latest in cyber security and data protection law by registering for our updates.
For more advice in this area contact a member of our team.
Related Insights & Resources
View all insights Related Insights & Resources
16 May 2019 UAE's new IoT policy: data protection in disguise?
30 November 2018 IT Masterclass - GDPR Update
17 October 2018 Back to basics: legal requirements for the e-commerce market
09 January 2020 Gowling WLG announces sponsorship of Team England
18 September 2018 Expert Guides recognises Gowling WLG's leading women in business law and distinguishes rising stars
email v-card Phone
Helen Davenport Partner - Birmingham
helen.davenport@gowlingwlg.com
Download vCard for Helen Davenport
Wendy J. Wagner Partner - Ottawa
wendy.wagner@gowlingwlg.com
Download vCard for Wendy J. Wagner
Manuela Finger, LL.M. Partner - Munich
manuela.finger@gowlingwlg.com
T: +49 (0)89 540 4120 45
Download vCard for Manuela Finger, LL.M.
Danhoé Reddy-Girard Partner - Paris
danhoe.reddy-girard@gowlingwlg.com
Download vCard for Danhoé Reddy-Girard
Tony Fielding Partner - Head of Technology, Dubai, Dubai
tony.fielding@gowlingwlg.com
Download vCard for Tony Fielding
Le Rong Legal Director - Guangzhou
le.rong@gowlingwlg.com
Download vCard for Le Rong
Meldir Erbulekova Associate - Moscow
meldir.erbulekova@gowlingwlg.com
Download vCard for Meldir Erbulekova
View our team Key contacts
Excellence, innovative solutions and practical advice are the hallmarks of Gowling WLG's Privacy & Data Protection Group.
Gowling WLG provides global leadership and advice on privacy issues, and develops functional compliance programs for national and international clients. Timely regulatory compliance counsel, combined with sophisticated commercial skills, allow our professionals to provide proactive security strategies and legal support on all data-related issues.
We provide leading-edge service, including the development of transaction data rooms and document retention programs, threat risk assessments and e-discovery services. In addition, using our collective expertise in technology and telecommunications, we're well-positioned to advise on privacy issues arising out of new technologies and business models.
Our team has developed an international perspective from working with technical experts in threat risk assessment, and produces reports on the latest developments in privacy and information management. We can keep you at the forefront of privacy compliance, advocacy and data management, through services such as the following.
Privacy compliance and advocacy
Global privacy compliance programs
Privacy advocacy governance
Privacy training and awareness
Privacy compliance in corporate transactions and negotiations
Transborder data transfers
Threat risk assessments
Development of electronic document management programs
Compliance with PCI DSS and security requirements
Due diligence in information technology transactions
Creation of data rooms
Development of data retention policies and schedules
To learn more about how we can support your privacy and data protection needs, please reach out to any member of our team.
13 January 2020 Canada's piece of the regulatory pie: Application of Canadian data privacy laws to a local data processor with a global reach
21 November 2019 IIROC introduces mandatory cyber breach reporting
22 October 2019 Hacked, cracked or breached: What's in a name when it comes to privacy?
View all newsLatest news
21 August 2019 Gowling WLG earns 357 rankings, multiple "Law Firm of the Year" honours in Best Lawyers™ in Canada 2020
21 August 2018 The Best Lawyers in Canada 2019 recognizes Gowling WLG's leading professionals
View our team Key contact
It's difficult to stay up to date and compliant with the complex, fast-changing world of data protection law. In this shifting landscape, you need to think about how to prevent cybercrime, security breaches and data loss from malicious server attacks. Another requirement is secure mapping and processing of various kinds of data.
Gowling WLG is here to deal with these issues. Our Munich data protection team understands data protection laws to the core: we know that data is your business asset - and we'll help you protect it in every possible way. Together, we'll ensure all of your data processing is compliant with the most recent legislative requirements, such as the General Data Protection Regulation (GDPR).
Home to a dedicated international group of data protection experts who can draw upon experience around the world, our team is at the forefront of fast-evolving technological developments and their legal implications - from cybercrime and blockchain to industry 4.0 and autonomous driving.
We offer premium services through a fee structure that's both transparent and reasonable. Our legal advice covers:
Data protection audits
Structuring of data processing in multinationals
In addition, we have a special focus on the area of online and digital media, having advised numerous clients on the multi-jurisdictional rollout of new products in the entertainment sector.
Responsive, approachable and commercially sound: get in touch with Gowling WLG for legal solutions that meet your unique needs.
07 September 2018 New automotive technology and Brexit
02 April 2018 Checklist for tasks needed in order to comply with GDPR
01 December 2015 Is Canada safe from the Safe Harbor decision?