Mishcon de Reya page structure
Site header
Main menu
Main content section


We defend the data rights of businesses and individuals

Data is central to all our lives. Every business, public authority and organisation, collects ever more data about consumers, citizens, contacts and employees – and that volume of data is being assessed in ever faster and more sophisticated ways. Protecting and leveraging data is already central to the success of many businesses and it lies at the core of our data practice.

We help businesses use data throughout their developmental life cycle: building their databases and extracting full value from them, reinforcing their cyber-security position and defending claims and regulatory investigations. We act for investors and sellers, who recognise the value of the data.

We also support individuals who are looking to enforce their data rights, whether it's a claim that a business has exploited personal data in breach of the law, or an individual facing criminal sanctions as a result of claims made against their use of data.

Central to everything we do is understanding the true value of data. Unless we understand the moral and economic pressures on data governance, we cannot properly advise on the law.

We have a full-service data offering, covering litigation, private client and corporate needs, and working together with non-lawyer data protection, data science and cyber experts.

Data Matters

Your insight into information law, see the latest here

  • Holding government and corporations to account: whether in high-profile cases like Lloyd v Google, or our case seeking to clarify the legal status of the UK's international agreement to transfer bank account details to the United States, through to taking discreet actions to enforce individuals' rights, our data team looks to test the boundaries of data law, while also seeking to pursue more straightforward claims.
  • We assist individuals with making data subject access requests (DSARs) and enforcing their rights at the ICO and in court.

Employee data

  • Employers hold vast amounts of data on their employees, from salaries and bank details to personal information and medical records. Used correctly, this data can enhance business outcomes; to ensure diversity – whether of age, race or ethnicity - or to measure and reduce any gender pay gap. However, data can pose a considerable risk to employers if managed incorrectly. We advise clients on how to minimise risk by adopting the right practices and data management strategies, and we train staff to ensure compliance.

Customer data

  • We advise clients on the rules relating to marketing and how to collect, hold and use consumer data.
  • Using data as a tool to add value during investment rounds, private equity investments or in more traditional M&As, and how to avoid pitfalls when acquiring companies.
  • Structuring ownership so that the value of the company's data is recognised and growth can be planned.
  • We have deep expertise in advising on international data transfers, including handling complex, multi-jurisdictional binding corporate rules (BCRs) and standard contractual clauses, data sharing agreements, and international transfer impact assessments.
  • Responding to DSARs made by individuals.

Our other data services

How can we help you?

How can we help you?

Subscribe: I'd like to keep in touch

If your enquiry is urgent please call +44 20 3321 7000

Crisis Hotline

I'm a client

I'm looking for advice

Something else