

Data Protection
In an increasingly regulated environment, businesses need to manage their data in order to manage their reputational and financial risks.
Across our international network, our data protection practitioners advise leading corporations and financial institutions on all aspects of compliance with data privacy law.
We carry out cross-border data privacy surveys for clients, both to review their existing processes and procedures and to help set up new ventures. With significant experience of designing, drafting, reviewing and updating internal policies as well as 3rd party contracts, we support clients with data collection and consents; cross-border data transfers; data monetization and ethics; liability and penalties; Privacy by design; automated data processing and profiling; and interactions with the relevant data protection authorities. We also advise clients on the implications of freedom of information legislation, how to mitigate risk and the potential to use the legislation for competitive advantage. ;
Our team draws on specialists from a variety of complementary disciplines including employment and benefits, financial services, intellectual property, outsourcing, regulatory and regulatory litigation to deliver a comprehensive approach to our clients' data protection needs.
With strong working relationships with regulators across our network, we have developed a nuanced understanding of the attitude of regulators and to assist clients with risk-based analysis. This means we provide our clients with a quick and efficient response – regardless of time zone. Our global presence, together with the extensive experience of our integrated international data protection group, sets us apart from many of our competitors. We have detailed experience in each jurisdiction, which brings valuable insight to managing the differing legal systems, cultures and regulatory regimes.
We are active participants in the privacy community, including the International Association of Privacy Professionals and regular speakers at industry events as well as contributing to industry publications.
Explore our services
News & insights

News: 29 JANUARY 2021
Allen & Overy advises SAP on the acquisition of Signavio
Allen & Overy has advised SAP SE on the acquisition of Signavio GmbH, a leading company in the enterprise business process intelligence and process management space.
Read more
Publications: 04 NOVEMBER 2020
The International Comparative Legal Guide: Cybersecurity 2021
This 4th edition provides a global analysis of common issues in cybersecurity laws and regulations across 26 jurisdictions. It covers key topics such as criminal activity, applicable laws, specific…
Read more
Publications: 09 OCTOBER 2020
Hamburg regulator issues EUR 35 million GDPR fine for data privacy breach
The Hamburg Data Protection Authority imposed the largest ever GDPR fine in German history on Swedish fashion company H&M on 1 October 2020. According to the regulator, the company had stored and used…
Read more
Publications: 30 JUNE 2020
Webinar: Cybersecurity – How to respond to an incident
Allen & Overy partners with leading security experts, Kroll, to discuss how to respond to a cybersecurity incident. In light of the heightened threat level due to remote working and disruption caused…
Read moreThe EU General Data Protection Regulation microsite

After over four years of discussion, the new EU data protection framework was adopted on 8 April 2016.
Download the practice brochure

A&O Digital Hub

Focusing on the latest digital trends and risks and developments in the field of data protection, privacy, information and cyber law.
Recognition
Working with them is delightful. They are highly professional, deliver immaculate client service and have a deep knowledge of data protection technicalities.
Chambers Global 2019 (Data Protection)
As an international player, they bring a whole range of seamless legal services to the table.
Chambers Global 2018 (Data Protection)
A combination of brilliant technical advice and an utterly pragmatic approach that makes it a pleasure to work with.
Legal 500 UK 2017 (Data Protection, Privacy and Cybersecurity)
They have really good tools available on cross-border data transfers.
Chambers Global 2018 (Data Protection)