Legal expertise in Data Privacy and Security

Maintaining privacy and security of data doesn’t get any easier with the new and inventive ways systems can be hacked and privacy breached. When you add to this the tougher laws and steeper fines coming on track, it’s important to have the right legal advice to ensure you have and are implementing best practice.

Our privacy practice also offers data protection registrar services, and privacy impact assessments and training or workshops to ensure you are following best practice.

Brexit Update

The Brexit transition period came to an end at 11pm on 31 December 2020. From the 1 January 2021 the EU GDPR no longer applies to the UK, but it has been retained in UK domestic law as the ‘UK GDPR’.

The Trade and Cooperation Agreement (TCA) agreed between the UK and European Union on 24 December 2020 addresses the issue of personal data protection, including agreement that data can continue to flow freely between the EEA and the UK beyond 2020.

The UK GDPR and the implementation of the TCA is good news for many businesses because going forward and for the most part, the UK and EU data protection regimes will remain basically the same.

However, there will be some important changes to the UK legal landscape following the end of the transition period so it is imperative that companies understand how they continue to remain compliant with both the UK and where applicable, EU data protection regimes.

Orbital Law - Privacy Practice

We provide advice on all aspects of
law concerning data protection and data privacy.

Data Privacy Audit

We will conduct a detailed assessment designed to identify any gaps between our clients’ internal policies, controls, processes and procedures and the requirements of the UK GDPR and related data protection legislation.

Data Privacy Impact Assessment

A Data Privacy Impact Assessment (DPIA) helps identify and minimize the data protection risks that may exist when any organization processes personal data.

Legal Advice

We provide advice in all areas and aspects of the GDPR and data protection law, including the preparation and review of data protection policy documents.

Training and Workshops​

The principle of “accountability” in the new world of the UK and EU GDPR, means that it is no longer sufficient for organisations to merely implement policies and procedures. They must now demonstrate a data protection culture. Training and education is a key way of ensuring compliance as well as assessing and improving the level of staff awareness across your organisation.

“Privacy by design must be at the forefront of the design of any application where personal data may be processed. Trying to ensure compliance after an application has been built can quickly become a very costly exercise.”

If you require legal advice or would like to find out more about our services, please get in touch with our commercial lawyers today.

Contact Us

Recent Posts

Data Breach? What You Should Do

A data breach involving potential unauthorised access to customers' personal data can have disastrous consequences for companies. In recent times, a number of large corporations such as British Airways and Ticketmaster have suffered data [...]