4th Edition of The Legal 500 Country Comparative Guide – United Kingdom: Data Protection and Cyber Security

May.05.2022

Heather Sussman, Shannon Yavorsky, Kelly Hagedorn and Alex Sobolev of Orrick's Cyber, Privacy & Data Innovation team authored the 4th edition of the UK Chapter for The Legal 500: Data Protection & Cyber Security Country Comparative Guide. The guide provides a pragmatic overview of the data protection and cyber security laws and regulations across over 20 jurisdictions.

Related Lawyers

Heather Egan Partner, Cyber, Privacy & Data Innovation, Conformité & Règlementation

Boston

See my bio

D:+1 617 880 1830
E: [email protected]

Practice:

Technology & Innovation Sector
Finance Sector
Energy & Infrastructure Sector
Cyber, Privacy & Data Innovation
Conformité & Règlementation
Investigations internationales et mesures d'application
Technology & Innovation
Fintech
Environmental, Social & Corporate Governance (ESG)
Strategic Advisory & Government Enforcement (SAGE)

vCard

See full bio

Heather Egan Partner

Boston

Heather partners with clients to reduce the risk of privacy and security incidents. In the event of an incident, she helps companies respond, successfully guiding them through investigation, remediation, notification and any ensuing government inquiries. She provides comprehensive crisis management support and companies rely on her to manage their response to catastrophes, investigations and government probes involving conduct by employees, contractors and third parties.

To help clients navigate complicated global regulatory compliance challenges, she leads comprehensive cybersecurity and privacy assessments worldwide, vets risks in corporate transactions, conducts internal investigations stemming from data incidents, and drafts and negotiates contracts concerning data-related vendors and arrangements. She regularly counsels businesses on how to mitigate risks associated with the collection, use, retention, disclosure, transfer and disposal of personal data. Outside of the U.S., she manages teams of talented counsel around the world to deliver seamless advice for clients that operate across many jurisdictional lines, developing comprehensive privacy and cybersecurity programs that address competing regulatory regimes.

Shannon Yavorsky Partner, Cyber, Privacy & Data Innovation, Technology Transactions

San Francisco; Londres

See my bio

D:+1 415 773 5731
E: [email protected]

Practice:

Technology & Innovation Sector
Cyber, Privacy & Data Innovation
Technology Transactions
Conformité & Règlementation
Investigations internationales et mesures d'application
Environmental, Social & Corporate Governance (ESG)
Strategic Advisory & Government Enforcement (SAGE)

vCard

See full bio

Shannon Yavorsky Partner

San Francisco; Londres

She advises public and private companies across several sectors, including life sciences and health technology, financial services, private equity, insurance, social media and technology on a range of EU and U.S. federal and state privacy laws. Shannon’s strategic counseling advice includes, but is not limited to:

Advertising and payment card processing self-regulatory frameworks
Controlling the Assault of Non-Solicited Pornography And Marketing Act (CAN-SPAM)
Electronic Communications Privacy Act (ECPA)
EU Artificial Intelligence Act
EU e-Privacy Directive
EU General Data Protection Regulation (GDPR)
Fair Credit Reporting Act (FCRA)
Gramm–Leach–Bliley Act (GLBA)
Health Insurance Portability and Accountability Act (HIPAA)
National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework
Telephone Consumer Protection Act (TCPA)
U.S. state breach notification laws
U.S. state privacy laws in California, Colorado, Connecticut, Utah and Virginia (CCPA, CPRA, CPA, CTDPA, UCPA, VCDPA)

Shannon also helps clients undertake comprehensive privacy, cybersecurity and artificial intelligence risk assessments, evaluates privacy, security and artificial intelligence risks in corporate transactions and drafts and negotiates data-related contracts. She advises clients on cross-border data transfers, data breaches and developing global privacy and artificial intelligence compliance programs.

Kelly Hagedorn Partner, Cyber, Privacy & Data Innovation, Conformité & Règlementation

Londres

See my bio

Practice:

Technology & Innovation Sector
Cyber, Privacy & Data Innovation
Conformité & Règlementation
Fintech
Strategic Advisory & Government Enforcement (SAGE)

vCard

See full bio

Kelly Hagedorn Partner

Londres

Kelly provides comprehensive regulatory advisory services to clients, including counseling on the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. She has designed and implemented data protection compliance programmes for clients in a range of sectors, including technology, gaming, manufacturing, and private equity.

Kelly has worked with companies to respond to data incidents that range from small-scale issues that do not attract regulatory attention to large, multi-jurisdictional breaches requiring coordination across numerous different regulatory regimes. She has also advised extensively on litigation matters involving allegations of fraud and financial crime, and in connection with securities laws.

During her career, Kelly has undertaken secondments to the Serious Fraud Office and a major telecommunications company. At the Serious Fraud Office, she worked on a number of cases dealing with restraint and confiscation matters. During her time with the telecommunications company, she helped develop and implement the company’s group-wide anti-bribery compliance programme security associated with data retention, processing, and transfer.

Alex Sobolev Senior Associate, Cyber, Privacy & Data Innovation, Technology Transactions

Londres

See my bio

D:+44 20 7862 4832
E: [email protected]

Practice:

Cyber, Privacy & Data Innovation
Technology Transactions
Strategic Advisory & Government Enforcement (SAGE)
Trademark, Copyright & Media
Propriété intellectuelle

vCard

See full bio

Alex Sobolev Senior Associate

Londres

Alex’s multidisciplinary practice and transatlantic experience enable him to provide strategic commercial advice for technology led companies, including coordinating and implementing data and consumer risk mitigation projects, providing outsourcing advice and developing key legal risk mitigation strategies in relation to products where the pace of innovation nearly always outpaces the law.

He has advised companies at all stages of the corporate lifecycle, from software development and product launch, through technology licensing, sale and purchase, to mergers and acquisitions of data and tech-heavy businesses. He has assisted organisations with the design, development and implementation of global data protection and compliance policies, as well the management of risk and security associated with data retention, processing and transfer.