Jane Finlayson-Brown
Partner
London

Jane Finlayson-Brown
Partner
London
Contact Details
Jane specialises in data protection, technology and outsourcing. She regularly advises companies and financial institutions on all aspects of data protection compliance, including data protection policies and procedures, the use of data in the provision of consumer and business products, Big Data issues, responding to data subject access requests, transfers of data in outsourcing projects and M&A transactions, cloud computing, data security breaches, cross border data transfers, transfers of data to overseas regulators, customer relationship management, employee monitoring and website compliance issues.
Jane’s practice also covers advising on all aspects of technology and commercial agreements including on outsourcing/private labelling agreements, electronic banking, the acquisition and supply of computer and communications systems and software, e-commerce and data transmission arrangements, as well advising on regulatory issues, such as encryption issues, e-commerce and e-signatures regulation and financial services outsourcing requirements.
Recent experience includes advising:
A multinational media organisation in connection with the acquisition of a business centered on a database which contained sensitive personal data in relation to the complex and sensitive data protection issues which arose.
A major global bank on a global data protection project which involved cross-border data transfer between 57 jurisdictions spanning the United States and Canada, Latin America, Europe, the Middle East and Africa and Asia Pacific. We provided advice, across our global network of offices, in relation to compliance with local laws and regulations relating to data protection and privacy, bank secrecy and outsourcing.
A variety of major corporates on their data protection compliance projects.
A major investment bank in connection with its receipt of U.S. subpoenas. The bank was required to produce documents from its offices around the world in relation to an investigation in the U.S. We provided advice across their international network on how to comply with the subpoenas whilst remaining in compliance with local data protection laws, customer confidentiality and privacy rights of employees.
A major UK-based bank on the production of documents as part of a major disclosure exercise in Enron litigation in the U.S., including advising on data protection, customer and counterparty confidentiality, privilege and employee privacy probabilities on production as well as organising the review, redaction and production of numerous documents.
Various clients on data protection issues arising out of security breach or potential security breach incidents, including a global media company, and an international handset manufacturer.
A number of customers and suppliers on the data protection aspects of their outsourcing agreements.
A U.S. investment bank on the data protection aspects of outsourcing of data processing services to India and the drafting of contracts relating to this.
A variety of major corporates on their data protection compliance projects.
Several U.S.-based international companies on the implementation of intra-group model agreements.
A U.S. based international bank on the privacy aspects relating to client employee debit and credit cards.
Jane is recognised as a Leading Individual for Data Protection, Privacy and Cybersecurity (Legal 500) and was awarded “Best in Privacy and Data Protection’ at the 2020 European Women in Business Law Awards.
Expertise
Practices
Sectors
Qualifications
Professional
Academic
CPE, The College Of Law, York, 1991
Law Society Finals, The College Of Law, York, 1992
BA (Hons), Music, Pembroke College, Oxford University, 1997
News & insights

Publications: 02 MARCH 2021
On the morning of 1 February 2021, in response to allegations of voter fraud, Vice-President Myint Swe (who has since assumed the role of acting President) declared a State of Emergency for one year…
Read more
Publications: 12 JANUARY 2021
Brexit certainty at last? An overview of the new EU-UK trading relationship
Following months of protracted negotiations and coming four and a half years after the UK voted to leave the EU, 24 December 2020 saw the EU and UK finally agree the shape of their future…
Read more
Publications: 19 JUNE 2020
Covid–19 coronavirus: emerging data protection and cybersecurity guidance (Updated 18 June 2020)
The Covid-19 coronavirus is creating a need for organisations to process personal data, for a variety of specific purposes (including managing and protecting their workforce, customers and the…
Read more
Publications: 17 APRIL 2020
Allen & Overy’s Data Protection team presented trends and insights in relation to data protection, cybersecurity and Covid-19 coronavirus.
Read more
Expertise
Practices
Sectors
Qualifications
Professional
Academic
CPE, The College Of Law, York, 1991
Law Society Finals, The College Of Law, York, 1992
BA (Hons), Music, Pembroke College, Oxford University, 1997