Assisted a number of clients (both local and international) in the context of the identification, management, coordination, and notification of complex personal cyber incidents / data protection breaches with global implications, including time-sensitive reporting obligations before the relevant data protection (and other competent) authorities worldwide, as well as on mitigation steps, lessons learned and communication strategy.

Various companies across a range of sectors on their international data transfer strategy from a multi-jurisdictional perspective, including Schrems II response affecting both intra-group and also client, supplier and partner set-ups, analysis of data flows and the creation of a data transfer compliance framework, performance and update of transfer impact assessments, and also the review and negotiation of data transfer agreements including standard contractual clauses approved globally. 

Various companies in relation to emerging data sovereignty and localization legislation and requirements across the globe with a view towards anticipating material impact on the business or flagging high-risk jurisdictions.

Various global companies on the design, implementation, and approval of Binding Corporate Rules (BCRs), including ongoing review and interaction with EU Lead Supervisory Authorities and relevant co-reviewers.