Data & Privacy
We advise on how to handle personal data across day-to-day operations, digital services, partnerships, and cross-border activities. We give clear, structured guidance you can apply directly in your business and contracts.
We advise organisations across industries and jurisdictions, from emerging businesses to established international groups, alongside NGOs and public bodies. We have worked with data protection laws in Switzerland, the UK, EU, California, Brazil, and other countries, adapting our guidance to the local and cross-border contexts our clients face.
Our services include:
- Privacy notices and cookie policies – written clearly for users, aligned with current legal requirements
- Data processing and data sharing agreements – allocating responsibilities and risk between parties
- Data protection clauses in commercial contracts – ensuring privacy terms align with your needs
- Cross-border data transfers – using appropriate mechanisms such as Standard Contractual Clauses and International Data Transfer Agreements
- Data protection impact assessments (DPIAs) – assessing risk and documenting decisions for high-risk processing
- Advising on roles and responsibilities – including controller/processor classification and joint controllership
- Data breach preparation and response – practical support in developing plans or responding to incidents
- Employee and contractor data issues – handling internal privacy matters, including policies and notices
- Privacy in product and service design – helping teams address data protection in digital tools and platforms
- Training and guidance for internal teams – tailored briefings and templates to support operational compliance
Your legal counsel
Anna Levitina
Partner
Anna combines deep legal expertise with a forward-looking approach to AI, technologies, and regulation.
Data & Privacy News
How the EU AI Act Impacts Swiss Businesses: What You Need to Know
In a significant decision on 4 October 2024, the Court of Justice of the European Union...
Why Getting Cookie Banners Right is Crucial – And How to Do It
In a significant decision on 4 October 2024, the Court of Justice of the European Union...
CJEU Ruling Expands GDPR Rules for Health-Related Data
In a significant decision on 4 October 2024, the Court of Justice of the European Union...
Data Protection Compliance Is Not Just for Big Tech
When we think about data protection and GDPR compliance, it’s easy to focus on Big Tech...
Transfer Impact Assessment under the GDPR
In an age where data flows seamlessly across borders, safeguarding personal information has become a pivotal...
Essentials of GDPR Compliance for US Businesses
If your US-based business handles data from European customers, you need to be aware of the...