Data security law and breach action
Spurred on by a relentless torrent of high-profile news stories
about security breaches and data loss, law-makers the world over
are now building a complex new legal framework for data
security.
This consists of tough new laws for fines, custodial penalties,
compulsory audits and the mandatory disclosure of serious security
incidents; more prescriptive regulations on issues like encryption
and the handling of incidents, plus very detailed rules for best
practice in the handling of data.
Data security law is now one of the hottest topics within
corporate governance. Organisations that fail to keep data safe and
secure face serious consequences.
Our market-leading team of highly experienced data security
lawyers provides organisations and individuals with advice and
assistance on all matters arising within the new legal framework
for data security, including how to deal with a serious security
breach and its consequences, such as regulatory action, contract
disputes and claims for compensation.
Our service
We offer a range of fixed-price services that are designed to
quickly identify gaps in your policies and procedures in critical
areas. These include:
- A unique “Information Lifecycle Mapping” service, which tracks
data flows around your organisation to identify risk areas and
vulnerabilities.
- A holistic solution for handling security incidents through our
Breach Action service.
- Drafting and document creation services, including for security
policies, outsourcing contracts and employee engagements, to help
you create a legally-compliant security system.
- Representing your interests in dealings with the Information
Commissioner and the Financial Services Authority, also providing
civil and criminal defence services in legal proceedings for
security breaches.
- Providing advice on key legislation, e.g. the Data Protection
Act; on best practice standards, e.g. ISO 27001; on financial
sector issues, e.g. PCI DSS and FSA rules; on government
contracting; on Privacy Enhancing Technologies, e.g. encryption,
and on security law issues overseas.