Skip to content

Jane Finlayson-Brown



Finlayson-Brown Jane
Jane Finlayson-Brown



Jane specialises in data protection, technology and outsourcing. She regularly advises companies and financial institutions on all aspects of data protection compliance, including data protection policies and procedures, the use of data in the provision of consumer and business products, Big Data issues, responding to data subject access requests, transfers of data in outsourcing projects and M&A transactions, cloud computing, data security breaches, cross border data transfers, transfers of data to overseas regulators, customer relationship management, employee monitoring and website compliance issues.

Jane’s practice also covers advising on all aspects of technology and commercial agreements including on outsourcing/private labelling agreements, electronic banking, the acquisition and supply of computer and communications systems and software, e-commerce and data transmission arrangements, as well advising on regulatory issues, such as encryption issues, e-commerce and e-signatures regulation and financial services outsourcing requirements. 

Recent experience includes advising:

A multinational media organisation in connection with the acquisition of a business centered on a database which contained sensitive personal data in relation to the complex and sensitive data protection issues which arose.

A major global bank on a global data protection project which involved cross-border data transfer between 57 jurisdictions spanning the United States and Canada, Latin America, Europe, the Middle East and Africa and Asia Pacific. We provided advice, across our global network of offices, in relation to compliance with local laws and regulations relating to data protection and privacy, bank secrecy and outsourcing.

A variety of major corporates on their data protection compliance projects.

A major investment bank in connection with its receipt of U.S. subpoenas. The bank was required to produce documents from its offices around the world in relation to an investigation in the U.S. We provided advice across their international network on how to comply with the subpoenas whilst remaining in compliance with local data protection laws, customer confidentiality and privacy rights of employees.

A major UK-based bank on the production of documents as part of a major disclosure exercise in Enron litigation in the U.S., including advising on data protection, customer and counterparty confidentiality, privilege and employee privacy probabilities on production as well as organising the review, redaction and production of numerous documents.

Various clients on data protection issues arising out of security breach or potential security breach incidents, including a global media company, and an international handset manufacturer.

A number of customers and suppliers on the data protection aspects of their outsourcing agreements.

A U.S. investment bank on the data protection aspects of outsourcing of data processing services to India and the drafting of contracts relating to this.

A variety of major corporates on their data protection compliance projects.

Several U.S.-based international companies on the implementation of intra-group model agreements.

A U.S. based international bank on the privacy aspects relating to client employee debit and credit cards.

Jane is recognised as a Leading Individual for Data Protection, Privacy and Cybersecurity (Legal 500) and was awarded “Best in Privacy and Data Protection’ at the 2020 European Women in Business Law Awards. 

News & insights

sunset image of a small sail boat at dusk

Publications: 02 MARCH 2021

Update from on the ground: Draft Cyber Security Law – Implications for business in the ICT sector in Myanmar

On the morning of 1 February 2021, in response to allegations of voter fraud, Vice-President Myint Swe (who has since assumed the role of acting President) declared a State of Emergency for one year…

Read more
Person handling documents

Publications: 12 JANUARY 2021

Brexit certainty at last? An overview of the new EU-UK trading relationship

Following months of protracted negotiations and coming four and a half years after the UK voted to leave the EU, 24 December 2020 saw the EU and UK finally agree the shape of their future…

Read more
Abstract graphic

Publications: 19 JUNE 2020

Covid–19 coronavirus: emerging data protection and cybersecurity guidance (Updated 18 June 2020)

The Covid-19 coronavirus is creating a need for organisations to process personal data, for a variety of specific purposes (including managing and protecting their workforce, customers and the…

Read more
Allen & Overy graphic

Publications: 17 APRIL 2020

Webinar: Data protection, cybersecurity and Covid-19 coronavirus: trends and insights (Updated 15 May 2020)

Allen & Overy’s Data Protection team presented trends and insights in relation to data protection, cybersecurity and Covid-19 coronavirus. 

Read more



Allen & Overy LLP
One Bishops Square
E1 6AD

View office →



Admitted as solicitor, England and Wales, 1994


CPE, The College Of Law, York, 1991

Law Society Finals, The College Of Law, York, 1992

BA (Hons), Music, Pembroke College, Oxford University, 1997