Skip to content

Jane Finlayson-Brown



Finlayson-Brown Jane
Jane Finlayson-Brown



Jane specialises in outsourcing, data, technology/IT and commercial transactions. She works on large scale outsourcing, procurement, and technology projects across a range of sectors, acting for both customer and suppliers. She advises on IT projects as well as business process outsourcings.

Jane’s transactional practice includes helping clients with transformational digitalisation projects that often have the use of data at their core but which often also involve the implementation of new technologies or processes. She is a highly experienced contracts draftsperson and negotiator and regularly works with colleagues in our financial services, payments and fintech practices more broadly to execute transactions that involve regulated financial services components as well as data protection issues.

She also regularly advises companies on the use of data in the provision of consumer and business products, including on issues relating to repurposing of data, profiling, AI, ad-tech and direct marketing.  She also advises on a wide range of other data protection issues such as data subject requests, data security breaches, data protection investigations, cross border data transfers (including in the aftermath of Schrems II), transfers of data to overseas regulators, customer relationship management, employee monitoring, data protection policies and procedures and website compliance issues. These projects often involve grey zone areas where there is a heightened privacy risk, where Jane helps companies make strategic decisions.

Jane is recognised as a Leading Individual for Data Protection, Privacy and Cybersecurity (Legal 500, 2021) and was awarded “Best in Privacy and Data Protection” at the 2020 European Women in Business Law Awards. She worked alongside her fellow partner, Ben Regnard-Weinrabe to write a chapter on the intersection of payments and data protection requirements for FinTech: Law and Regulation (Elgar Financial Law and Practice series) Edited by Jelena Madir.

Legal 500 UK 2022, Data Protection, Privacy and Cybersecurity
• “Jane Finlayson-Brown is superb and leads a formidable team.”
• “Jane Finlayson-Brown is responsive and a great relationship manager.”
Chambers UK 2022, Data Protection & Information Law
• "She is very technically knowledgeable and able to translate complicated issues into pragmatic solutions."
• "She has a strong, business-focused approach; she really focuses on practical and implementable solutions."

Related articles

Binary numbers on a screen

Blog Post: 09 May 2022

Joint opinion of EDPB and EDPS raises concerns about alignment of the proposed EU Data Act with current data protection framework

On 5 May 2022, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) issued a joint opinion (Opinion) addressing the legislative proposal of the European…

Read more

Blog Post: 26 April 2022

New Global Cross-Border Privacy Rules Forum established by APEC CBPR members

Read more

Blog Post: 05 April 2022

Further details revealed about the upcoming EU-US Trans-Atlantic Data Privacy Framework fact sheets

Read more

Blog Post: 01 April 2022

UK - Standard clauses for international data transfers come into force

Read more



Allen & Overy LLP
One Bishops Square
E1 6AD

View office →



Admitted as solicitor, England and Wales, 1994


CPE, The College Of Law, York, 1991

Law Society Finals, The College Of Law, York, 1992

BA (Hons), Music, Pembroke College, Oxford University, 1997