Keily heads up the Cyber & Data Privacy Enforcement & Litigation Practice in London. Keily works with her clients to navigate crises, and to achieve better regulatory and judicial outcomes in all aspects of international data privacy enforcement and litigation. Keily is ranked as a key practitioner in data protection, privacy and cyber security in Legal 500.

As a litigator, Keily has a different perspective on cyber and data privacy issues.

Keily has led the response to investigations by the UK’s Information Commissioner’s Office, the Irish Data Protection Commission, the FCA, the SFO, the US Department of Justice, the FBI, the SEC and Parliamentary Select Committees. She has also acted as external legal counsel for regulators.

In the civil arena, Keily has led on a number of high-profile contentious matters, including multi-jurisdictional investigations into post-GDPR data breaches, judicial reviews and associated civil litigation.

Keily has represented the private sector at the United Nations and the European Criminal Bar Association. She is committed to improving diversity and social mobility in the legal sector.    

Keily sits on the Law360's 2020 Editorial Advisory Board on Cybersecurity & Privacy and also leads the IAPP Cyber & Privacy Investigations, Enforcement & Litigation Affinity Group.

Prior to joining Orrick, Keily led the Contentious Data Privacy, Law & Strategy practice at PwC having been a litigator at two international law firms before this.

    • Acting for a client specialising in data insights and identity verification services in connection with an assessment notice and compulsory audit by the Information Commissioner’s Office under DPA 2018.
    • Acting for a client which collects and aggregates financial and credit information in connection with an assessment notice and potential enforcement action by the Information Commissioner’s Office.
    • Acting for a client in connection with a ransomware attack impacting on service availability.
    • Acting for a client in connection with regulatory and governmental interference in individual privacy rights.
    • Acting for numerous clients in respect of small, medium and large personal data breaches often involving special category data from advice on regulatory notification to potential class action liability.
    • Acting as external counsel for international regulators in respect of investigations under the GDPR and the DPA 1998.

    Please note: Keily's experience includes that prior to joining Orrick.