Data protection and digital transformation are at the core of our expertise. Unlike traditional law firms, we approach General Data Protection Regulation (GDPR) compliance and broader data privacy matters holistically, assembling multidisciplinary teams that combine legal, IT, and governance professionals. This enables us to deliver pragmatic, business-focused solutions that address not only legal requirements but also technical and operational realities.

We advise both local and international clients across a wide range of industries, including finance, insurance, healthcare, pharmaceuticals, telecoms, online services, and retail. Our international team of professionals in over 80 countries enables us to provide comprehensive advice to multinational clients.

Our key areas of expertise include:

GDPR and Data Privacy Compliance: Comprehensive advice on GDPR application, privacy policies, data processing agreements, consent management, and sensitive data handling, support in data breach investigations and mitigations.
AI and Emerging Technologies: Guidance on compliance with the EU AI Act, risk assessments, documentation, and integration with sector-specific regulations.
Implementation of Digital Solutions: Supporting the adoption of new technologies while ensuring regulatory compliance and data security.

Our services cover:

Data Privacy Audits: In-depth reviews of your data processing activities, policies, and systems to identify risks and actionable improvements.
Data Management and Compliance Advice: Expert guidance on GDPR, the EU Data Act, Data Governance Act, and other relevant regulations.
Personal Data Breach Management: Rapid response and support for breach containment, mitigation, and regulatory reporting.
Drafting Policies and Contracts: Preparation of robust data protection policies, privacy notices, and tailored contractual clauses.
Training and Awareness: Tailored training programs, including our online course “Personal Data Protection and Privacy” to empower your team with the latest knowledge and best practices. More information about the training is available here.
Dispute Resolution and Litigation: Representation in disputes with data subjects or authorities.
Data Protection Impact Assessments (DPIA) and Legitimate Interest Assessments: Conducting and documenting assessments required under the GDPR.
Cross-Border Data Transfers: Advising on international data transfers, including safeguards, contracts, and transfer impact assessments.
AI Compliance and Risk Management: Determining AI system risk levels, preparing required documentation, and supporting registration and compliance with supervisory authorities.