Skip to content

Jane Finlayson-Brown



Finlayson-Brown Jane
Jane Finlayson-Brown



Jane specialises in data protection, technology and outsourcing. She regularly advises companies and financial institutions on all aspects of data protection compliance, including data protection policies and procedures, the use of data in the provision of consumer and business products, Big Data issues, responding to data subject access requests, transfers of data in outsourcing projects and M&A transactions, cloud computing, data security breaches, cross border data transfers, transfers of data to overseas regulators, customer relationship management, employee monitoring and website compliance issues.

Jane’s practice also covers advising on all aspects of technology and commercial agreements including on outsourcing/private labelling agreements, electronic banking, the acquisition and supply of computer and communications systems and software, e-commerce and data transmission arrangements, as well advising on regulatory issues, such as encryption issues, e-commerce and e-signatures regulation and financial services outsourcing requirements. 

Recent experience includes advising:

A multinational media organisation in connection with the acquisition of a business centered on a database which contained sensitive personal data in relation to the complex and sensitive data protection issues which arose.

A major global bank on a global data protection project which involved cross-border data transfer between 57 jurisdictions spanning the United States and Canada, Latin America, Europe, the Middle East and Africa and Asia Pacific. We provided advice, across our global network of offices, in relation to compliance with local laws and regulations relating to data protection and privacy, bank secrecy and outsourcing.

A variety of major corporates on their data protection compliance projects.

A major investment bank in connection with its receipt of U.S. subpoenas. The bank was required to produce documents from its offices around the world in relation to an investigation in the U.S. We provided advice across their international network on how to comply with the subpoenas whilst remaining in compliance with local data protection laws, customer confidentiality and privacy rights of employees.

A major UK-based bank on the production of documents as part of a major disclosure exercise in Enron litigation in the U.S., including advising on data protection, customer and counterparty confidentiality, privilege and employee privacy probabilities on production as well as organising the review, redaction and production of numerous documents.

Various clients on data protection issues arising out of security breach or potential security breach incidents, including a global media company, and an international handset manufacturer.

A number of customers and suppliers on the data protection aspects of their outsourcing agreements.

A U.S. investment bank on the data protection aspects of outsourcing of data processing services to India and the drafting of contracts relating to this.

A variety of major corporates on their data protection compliance projects.

Several U.S.-based international companies on the implementation of intra-group model agreements.

A U.S. based international bank on the privacy aspects relating to client employee debit and credit cards.

News & insights

News article header

Publications: 01 OCTOBER 2019

Preparing for a hard Brexit - ten points relevant to mainstream debt capital market issuance

The current political landscape means that uncertainty as to the nature of the UK’s withdrawal from the EU continues. It remains a possibility that the UK will leave the EU on 31 October 2019 without a deal – a so-called “no-deal Brexit”. A no-deal Brexit will mean that the UK will not be a Member State of the EU and that Union law will not be applicable in the UK.

Read more

Publications: 01 MARCH 2019

Data Protection Post-Brexit - What to expect and how to prepare

Understanding the practical implications of Brexit for data protection compliance, particularly for companies operating internationally and those reliant on transfers of personal data between the UK and the European Union (EU), is gaining ever greater importance as the 29 March 2019 deadline for exiting the EU gets closer. Although negotiations are still continuing and a possible withdrawal agreement has been proposed, a hard Brexit – in other words a no deal outcome – remains possible.

Read more

Publications: 23 JANUARY 2019

Brexit Podcast: Preparing for a hard Brexit - key points to note for equity capital market participants

In the event of the UK leaving the EU without a deal, what do issuers and other participants in the equity capital markets need to consider?

Read more

Publications: 01 MAY 2018

Securitisation – scoping out the key considerations and possible implications

Notwithstanding that the EU ABS markets are significantly impaired compared to pre-financial crisis levels, securitisation remains an important funding tool and risk-transfer mechanism for institutions established in the UK and elsewhere.

Read more



Allen & Overy LLP
One Bishops Square
E1 6AD

View office →



Admitted as solicitor, England and Wales, 1994


CPE, The College Of Law, York, 1991

Law Society Finals, The College Of Law, York, 1992

BA (Hons), Music, Pembroke College, Oxford University, 1997