Data, Privacy and Cyber
We can help you harness the power of the data you hold whilst ensuring that you are acting in accordance with legal and regulatory requirements, as well as maintaining customer, employee and public trust. We also support when things go wrong and an urgent response is needed to a cyber-incident, regulator enquiry or privacy claim.
Overview
Our team is recognised for its practical, pragmatic approach. We pride ourselves on our ability to digest complex issues of law and regulation into accessible, commercial advice, enabling our clients to maximise their use of data and respond to challenges whilst managing complex risks.
We regularly initiate protective legal proceedings for clients, including injunctive relief. Successful proceedings include persons unknown proceedings following cyber-attacks and applications against rogue individuals. We also have extensive expertise and experience in defending individual and mass privacy claims.
Many of our clients are part of a global group. We are able to draw upon expertise across our international offices and network of trusted partners to provide a solution for handling significant projects, or responding to global incidents.
We advise clients across all sectors but have particular expertise in advising clients in financial services (includes insurance); health and social care; real estate; and technology. This sector expertise means that our lawyers are able to advise specifically in the context of industries which have their own, unique challenges.
As well as providing bespoke solutions to our client's needs, we have specific, fully outsourced offerings which includes data protection healthchecks, handling of data subject access requests, corporate due diligence and data breach response planning. We also provide cyber insurance incident response services.
Featured experience
Artificial intelligence
Advising a global health tech company using AI to improve patient health outcomes on their entry into the UK market and establishment of a worldwide performance benchmarking programme.
DPIAs
Leading a series of complex data protection impact assessments for an insurer relating to the use of personal data for pricing, claims handling and fraud detection.
Regulatory action and sanctions
Advising clients facing regulatory action, with successful appeals against regulatory sanctions.
Cyber and privacy litigation
Acting in cyber and privacy litigation, including persons unknown injunctions (Ince Group, Pendragon, Armstrong Watson), injunctive proceedings against known persons (Notting Hill Genesis) and leading defensive privacy cases, including Johnson v Eastlight [2021].
Employee privacy and DSARs
Advising an investment bank on complex employee privacy matters and providing a fully outsourced end‑to‑end subject access request service.
Our sector expertise
Financial Services
Our financial services clients range from large financial institutions to FinTech companies and asset managers, so we have experience with all companies regardless of their shape or size.
We understand that data protection is a key priority in the financial services sector, and our expert team can guide you through all aspects of data, privacy and cyber matters from international data transfers to managing the impact of data breaches if they occur.
We provide a comprehensive range of advisory services, from managing contractual issues to advising clients in the sector on the ever evolving artificial intelligence. In addition to our advisory services, we offer cyber defence and response services, including training, helplines, response teams, and associated litigation.
Featured Experience
- Advising an investment bank on complex employee privacy matters and providing a fully outsourced end to end subject access request service
- Analysing on the designation of parties and drafting related contracts for an adviser network
- Advising a wealth management company on its data retention strategy
- Advising a bank on access to consumer transaction data in the context of an employee investigation
Key contacts
Health
We stand out for our skill and expertise in working with organisations across the health and social care sector, whether public or private health providers, government, or MedTech operators.
We understand the critical nature of patient/service user, employee, and public trust and provide expert advice on all areas of information governance, from day-to-day compliance queries to major regional and international strategic projects.
In addition to advising on complex information-sharing frameworks, politically sensitive data breach claims, and enforcement action, our expertise extends to advising on health sector-specific issues such as confidentiality, freedom of information, and access to health record requests.
Featured Experience
- Defending the widely report and precedent-setting claim of Scott v LGBT Foundation Ltd [2020] EWHC 483 (QB), in which it was successfully argued that a verbal disclosure does not amount to processing for the purposes of data protection legislation
- Working closely with a health organisation in relation to a data breach and drafting submissions in response to a proposed ICO fine, successfully achieving a reduction of 92%
- Advising a publicly listed Australian health data AI business on its UK and European operations, and including global arrangements for transfer and flow of data
- Advising on a range of national and local projects regarding the lawful commercialisation of NHS data, including collaborations between NHS and private MedTech providers
Key contacts
Insurance
We support a wide range of insurance sector clients including (re)insurers, brokers, MGAs and industry bodies, including the Association of British Insurers.
Our vast industry knowledge allows us to provide a comprehensive range of services including strategic , privacy impact assessments and audits, resolving contractual issues and supporting new initiatives such as underwriting powered by AI, automated claims settlements, and partnerships with InsurTechs.
We offer an end-to-end solution for our clients' needs, drawing on the experience and expertise of our regulatory, IT, and insurance distribution colleagues where required.
Featured Experience
- Advising the Association of British Insurers and the Lloyd's Market Association on engagement with Government resulting in the inclusion of the "insurance" processing condition for special categories of personal data within the Data Protection Act 2018
- Leading a series of complex data protection impact assessments for an insurer regarding the use of personal data for pricing, claims handling and fraud detection
- Advising a broker on a significant ransomware incident requiring regulatory and data subject notifications
- Regularly advising insurers, brokers and other market participants on data flows and designation of parties within the insurance distribution chain
Key contacts
Technology
Our extensive expertise in the technology sector allows us to support a wide range of clients, from growing start-ups to leading global technology organisations.
Our strong links with the ICO result in us closely following developments in law and guidance, so we are well-positioned to advise on the evolving regulatory landscape as it affects our clients.
We regularly advise clients on data protection issues commonly arising in the context of technology projects. This includes the use of wearables, IoT, data analytics, Blockchain and other DLTs, augmented/virtual reality, cloud hosting, overseas transfers, use of sub-processors, data processing clauses, data sharing agreements, risk assessments, and managing contractual liability for data protection breaches. Our also regularly advises technology sector clients following security breaches such as ransomware attacks.
Featured Experience
- Advising a leading chain of private fitness and leisure clubs in relation to data protection considerations arising from the launch of a member app
- Supporting an international FinTech supplier in relation to various data protection issues, including overseas transfers, liability for data protection breaches and obtaining consent for direct marketing contents
- Advising a data science accreditation provider on its data protection strategy including for data transfers post-Schrems II
Key contacts
Data, Privacy & Cyber key contacts
Who we are
Why choose DAC Beachcroft?
We’re a broad-based commercial firm serving a wide range of sectors with a strong heritage in insurance,
health and real estate. We combine excellent legal skills and cutting-edge delivery expertise to design
solutions that fit the needs of our clients – often involving clever uses of technology.

Services
Contacts






