James Drury-Smith

Of Counsel
Technology Companies Group

James specialises in data privacy law and has extensive experience advising on the Data Protection Act 1998, the EU Data Protection Directive and the application of data protection laws globally. James also regularly advises clients on business and consumer issues arising through the regulation of online activities and e-commerce.

James' experience includes advising on:

  • complex data processing arrangements;
  • data sharing and outsourcing agreements;
  • the international transfer of personal data;
  • customer and employee privacy policies;
  • the collection and use of personal data in the online environment;
  • the use of personal data for direct marketing;
  • cookie law compliance;
  • data subject access requests;
  • employee monitoring and vetting;
  • data privacy awareness training;
  • data security and breach management;
  • privacy law sanctions;
  • engagement with and notifications to data privacy regulators;
  • data privacy audits, impact assessments and compliance programmes;
  • website terms and conditions;
  • the buying and selling of goods and services online; and
  • the promotion of services and products.

Before joining Orrick, James was legal counsel to Barclays Bank Group Privacy function. In his role, James provided legal, strategic and operational guidance to Barclays global data protection compliance programme, including managing the practical implementation of data privacy controls.

James has been awarded the Information Systems Examinations Board (ISEB) Accreditation in Data Protection.

James is a ranked lawyer for data protection advice in Chambers and Partners UK 2015. Chambers' sources describe James as "quick and well organised, and has the ability to translate deep privacy knowledge into a business-friendly approach". Another source says he is "great at understanding issues and getting to the nub of things. He gives pragmatic advice in layman-friendly terms".

James Drury-Smith

Select Publications
Admitted In
  • England and Wales

  • LL.B., University of Leeds, 2002
  • L.P.C., College of Law of England and Wales, York, 2003
  • Certificate, Information Systems Examinations Board (ISEB) Accreditation in Data Protection, 2004
  • Associate to watch: Data Protection and Information Law, Chambers UK 2015 & 2016

Please do not include any confidential, secret or otherwise sensitive information concerning any potential or actual legal matter in this e-mail message. Unsolicited e-mails do not create an attorney-client relationship and confidential or secret information included in such e-mails cannot be protected from disclosure. Orrick does not have a duty or a legal obligation to keep confidential any information that you provide to us. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

By clicking "OK" below, you understand and agree that Orrick will have no duty to keep confidential any information you provide.