About us
Achieving more together Achieving more for you Achieving more for your business Achieving more for our world
Insights
Publications News Blogs Thought leadership Webinars Register for updates
Events
Careers
Offices
Birmingham Cambridge Leeds London Manchester Norwich Oxford

Existing clients

Log in to your client extranet for free matter information, know-how and documents.

Client Extranet

Staff

Mills & Reeve system for employees.

Information law, data protection and privacy

We help our clients protect their personal data - to guard against the risks of financial and reputational ‘fallout’ associated with data protection, privacy and other information law breaches.

We offer comprehensive privacy and data protection legal services. This helps our clients navigate the complex legal landscape surrounding the collection, use, sharing and storage of personal data.

We're also experienced in helping our clients with Freedom of Information Act 2000 and the Environmental Information Regulations 2004 related matters.

Our services include:

  • UK GDPR compliance: assisting with UK and global compliance programmes, including through our UK GDPR Representative services.

  • Data privacy training: training to help organisations and their employees understand their obligations and responsibilities.

  • Data processing agreements: assisting with UK and international data processing agreements, to help ensure that personal data is processed in accordance with applicable laws.

  • Data Protection Impact Assessments (DPIAs): assisting with DPIAs, including to identify potential risks and providing pragmatic advice.

  • Data breaches: providing expert advice in the event of a data breach, including incident response, regulatory reporting, and risk mitigation strategies.

Our experience

  • Advised on data protection law work in cutting-edge technology fields, including: Artificial Intelligence (AI) and neural network technology; Blockchain; Metaverse arrangements; Internet of Things (IoT); Connected Car Technology; and Cloud Computing.

  • Helped global clients with their UK and EU GDPR compliance arrangements across their international operations, by producing intra-company data processing agreements, taking into account the Schrems II requirements.

  • Successfully avoided regulatory fines and enforcement action against our client in respect of data breaches, by working with the client in respect of the regulatory breach notification and corresponding with the ICO.

  • Helped with formulating and advising on DPIAs involving the processing of personal data by way of Artificial Intelligence and neural network technology in the context of facial recognition systems.

  • Advised education organisations on appeals before the Information Tribunals in relation to the Freedom of Information Act 2000 and the Environmental Information Regulations 2004. This included requests for pre-publication academic research, access to course materials and employee salary disclosure.

Did you know?

Specialists

Our team are dedicated specialists, with a track record in the field of data protection, privacy and information law.

Proactive and responsive

We can help at all stages – whether it's compliance assistance, or being there for you during any data breaches.

£17.5m or 4% of your global turnover

Let our expert team advise you, to guard against the risks of such massive regulatory fines.

Our clients

We represent the full range of clients, from innovative start-ups, to global corporates (including those listed on NASDAQ), as well as public sector clients.

Our lawyers

Our team consists of lawyers with in-depth data protection, privacy and information law expertise. They are recognised as thought-leaders – they've presented at leading industry events, and have been published nationally.

What do others say?

 

“Mills and Reeve has a great team, which is responsive and extremely knowledgeable in the area of data protection and privacy.”

Legal 500

“Not only does Mills & Reeve have deep knowledge of data protection laws, it is adept at finding solutions for implementing processes that comply with those laws.”

Legal 500

Our expertise


Data breaches and cyber issues

Environmental, Social and Governance (ESG)

We help you keep pace with the changes, challenges and opportunities in this rapidly evolving landscape.
Read more about ESG

Meet the information law, data protection and privacy team

Latest blogs

13 Nov 2024

Consent or else you'll pay!

Behavioural advertising continues to be an area of scrutiny by data protection authorities in the EU and UK, particularly in relation to the legal basis that controllers rely upon in order to conduct the processing. Unsurprisingly, Meta continues to be the focus of that scrutiny.

More

24 Oct 2024

ICO launches new data protection audit framework

The Information Commissioner's Office (ICO) has launched a new data protection audit framework to help organisations assess their compliance with UK data protection laws. This will allow businesses to identify gaps, mitigate risks and improve transparency.

More

21 Oct 2024

Dear AI, predict what I want better, but don’t use my data!

Most companies are now using some element of AI, whether that’s through targeted advertising, chat boxes or, for more tech-savvy companies, generating content to give users a head start. While some welcome the use of AI and others are more skeptical, the expectation on what AI...

More

17 Oct 2024

Recruitment, how automated should you get? Part 1

Employers looking for efficient automated solutions in the recruitment sphere will have no trouble finding software vendors at the click of a button. It’s an attractive method to conduct the recruitment process although legally there are risks an employer should be aware of.

More

26 Jul 2024

Digital identities washed up or kicked out?

We examine how the dropping of the Data Protection and Digital Information Bill and the change of government has impacted the proposed changes to digital identity verification.

More

18 Jul 2024

New cyber security and data Bills announced

Among the measures announced yesterday in the first King’s Speech of the Starmer Government are Bills that will update current cybersecurity and data legislation...

More

08 Feb 2024

Sending data to the US? What UK organisations need to know about the new UK-US data bridge

A ‘data bridge’ is about to be established between the UK and US to permit the flow of personal data without the need for ‘overseas transfer’ safeguards. This only applies where the recipient in the US is certified under a Data Privacy Framework...

More

08 Feb 2024

Prohibited: Meta's unlawful behavioural advertising practices

The European Data Protection Board has published an urgent binding decision to ban Meta’s processing of personal data for behavioural advertising conducted on the legal bases of performance of a contract or legitimate interests. We look at the practical considerations for orga...

More

07 Feb 2024

Who doesn't love a cookie?

Expect stronger cookie law enforcement in 2024. Updates to legislation and developments in technology will continue to influence how we experience the web. ICO signals intent with increased regulatory scrutiny on the horizon...

More

Related sectors & services

UK GDPR representative services Cyber response Information technology