Privacy

We provide strategic, practical advice to help organisations manage privacy obligations, data risk and regulatory scrutiny with confidence and advise individuals on their privacy rights.

We advise businesses and government on privacy and data protection governance, helping them navigate complex and evolving legal obligations.

Our team supports clients across the full data lifecycle, from assessing data handling practices and drafting privacy documentation, to managing data breaches, responding to regulators and appearing in any associated litigation.

We take a commercial, risk‑based approach to ensure data practices are legally sound, operationally workable and aligned with business objectives.

We also advise individuals on their privacy rights, including serious invasions of their privacy and misuse of their information.

We provide strategic and practical advice on privacy and data protection compliance, including:

• Assessing data processing activities and privacy risk
• Drafting and reviewing privacy policies, collection notices, data sharing agreements and data governance frameworks
• Advising on privacy impact assessments and information audits
• Supporting product launches and new technologies involving personal information
• Managing cross‑border data transfers and multi‑jurisdictional privacy issues
• Advising on privacy complaints, access requests and regulatory engagement
• Advising on data breaches
• Engaging with regulators
• Serious invasions of privacy and misuse of information
• Doxxing

Our focus is on delivering clear guidance that supports compliance while enabling innovation and commercial outcomes.

We work closely with clients to manage privacy risk in real‑world scenarios, including responding to data breaches, regulatory inquiries and stakeholder concerns. Our team assists organisations to:

• Prepare for and respond to data breaches, including regulator and stakeholder engagement
• Develop and implement data breach response plans
• Navigate investigations by privacy regulators and oversight bodies
• Embed privacy‑by‑design principles into operations and technology
• Align privacy compliance with broader governance, risk and compliance frameworks

We provide calm, practical support when issues arise, and proactive advice and training to help prevent them.

Selected examples of our privacy and data protection experience include:

• Acting for a technology services provider in relation to a data breach, including responding to OAIC and OVIC investigations and managing communications with affected businesses and individuals
• Advising multiple businesses on privacy policies, privacy impact assessments, services agreements, cross‑border data arrangements, information audits, data breaches and response plans, privacy complaints and access requests
• Acting for a national service provider to governments on conciliations, access requests and related privacy issues
• Advising a communications technology company on services involving multi‑jurisdictional privacy considerations