Emily Francis

Managing Associate

High-Res Photo

Profile

Emily is a Managing Associate in the Data team. She advises start-ups, scale ups and established corporations on all matters relating to data protection and privacy, including compliance projects, advisory work, facilitating data subject rights, assessing the risks of AI use, and addressing data breaches.

Emily leads on much of the Firm's outsourced Data Protection Officer work, and is also a lead team member for the Firm's Assign UK and EU Representative service and Data Subject Access Request (DSAR) support offerings.

She strives to be an embedded part of clients' teams; working to build strong relationships with clients' internal legal and compliance teams, and wider team leads, to support clients to effectively implement change within their organisation. She has excellent experience in communicating complex processing activities and privacy measures to privacy-conscious customers and users.

More Details

Key Experience

Advised a global IT and security company on a broad range of data protection matters, including complex subject access requests, data protection impact assessments, multi-jurisdictional marketing questions, and data incident response and reporting. Developed and delivered bespoke training to the global marketing on multi-jurisdictional compliance.
Worked with the legal, security and IT teams of a buy to rent operator to complete a robust gap analysis to then mature their compliance documentation and processes. Advised on complex data subject rights requests, including in connection with the use of body-worn cameras and access to tenancy details by ex-partners, and delivered compliance training for their customer support teams to enhance compliance in practice.
Supported in-house legal counsel with strategic planning, including producing guidance for heads of teams and data protection leads, completing a comprehensive data mapping exercise, and producing detailed guidance on the electronic marketing rules.
Worked with a global aesthetics business with franchised clinics throughout the UK, supporting with complex data subject rights requests including in connection with the disclosure of CCTV footage, accessing adverse health effects records, and requests for erasure of accounts and health data. Developed a comprehensive intra-group data transfer agreement and data sharing agreements.