Skip to content

Jane Finlayson-Brown



Finlayson-Brown Jane
Jane Finlayson-Brown



Jane specialises in data protection, technology and outsourcing. She regularly advises companies and financial institutions on all aspects of data protection compliance, including data protection policies and procedures, the use of data in the provision of consumer and business products, Big Data issues, responding to data subject access requests, transfers of data in outsourcing projects and M&A transactions, cloud computing, data security breaches, cross border data transfers, transfers of data to overseas regulators, customer relationship management, employee monitoring and website compliance issues.

Jane’s practice also covers advising on all aspects of technology and commercial agreements including on outsourcing/private labelling agreements, electronic banking, the acquisition and supply of computer and communications systems and software, e-commerce and data transmission arrangements, as well advising on regulatory issues, such as encryption issues, e-commerce and e-signatures regulation and financial services outsourcing requirements. 

Recent experience includes advising:

A multinational media organisation in connection with the acquisition of a business centered on a database which contained sensitive personal data in relation to the complex and sensitive data protection issues which arose.

A major global bank on a global data protection project which involved cross-border data transfer between 57 jurisdictions spanning the United States and Canada, Latin America, Europe, the Middle East and Africa and Asia Pacific. We provided advice, across our global network of offices, in relation to compliance with local laws and regulations relating to data protection and privacy, bank secrecy and outsourcing.

A variety of major corporates on their data protection compliance projects.

A major investment bank in connection with its receipt of U.S. subpoenas. The bank was required to produce documents from its offices around the world in relation to an investigation in the U.S. We provided advice across their international network on how to comply with the subpoenas whilst remaining in compliance with local data protection laws, customer confidentiality and privacy rights of employees.

A major UK-based bank on the production of documents as part of a major disclosure exercise in Enron litigation in the U.S., including advising on data protection, customer and counterparty confidentiality, privilege and employee privacy probabilities on production as well as organising the review, redaction and production of numerous documents.

Various clients on data protection issues arising out of security breach or potential security breach incidents, including a global media company, and an international handset manufacturer.

A number of customers and suppliers on the data protection aspects of their outsourcing agreements.

A U.S. investment bank on the data protection aspects of outsourcing of data processing services to India and the drafting of contracts relating to this.

A variety of major corporates on their data protection compliance projects.

Several U.S.-based international companies on the implementation of intra-group model agreements.

A U.S. based international bank on the privacy aspects relating to client employee debit and credit cards.

News & insights

Computer hardware

Publications: 09 OCTOBER 2020

Data Protection Post-Brexit - What to expect and how to prepare

The UK left the European Union (EU) on 31 January 2020, and the transition period agreed between the EU and the UK is due to end on 31 December 2020, with any further extension to that period ruled…

Read more
Bird's eye few of five people sitting around a table in a work setting

News: 10 SEPTEMBER 2020

Jane Finlayson-Brown and Katinka Middelkoop recognised for excellence in their fields at 2020 European Women in Business Law Awards

Allen & Overy Corporate partners Jane Finlayson-Brown and Katinka Middelkoop have been awarded prizes for ‘Best in Privacy and Data Protection’ and ‘Best in M&A’ respectively at the 2020 European…

Read more
Abstract graphic

Publications: 19 JUNE 2020

Covid–19 coronavirus: emerging data protection and cybersecurity guidance (Updated 18 June 2020)

The Covid-19 coronavirus is creating a need for organisations to process personal data, for a variety of specific purposes (including managing and protecting their workforce, customers and the…

Read more

Publications: 17 APRIL 2020

Webinar: Data protection, cybersecurity and Covid-19 coronavirus: trends and insights (Updated 15 May 2020)

Allen & Overy’s Data Protection team presented trends and insights in relation to data protection, cybersecurity and Covid-19 coronavirus. 

Read more



Allen & Overy LLP
One Bishops Square
E1 6AD

View office →



Admitted as solicitor, England and Wales, 1994


CPE, The College Of Law, York, 1991

Law Society Finals, The College Of Law, York, 1992

BA (Hons), Music, Pembroke College, Oxford University, 1997