Inner Hero banner Image

Data Privacy & Cyber Security

UK GDPR and Cyber Security are amongst the most important areas in which you will look to have excellent legal advice

UK GDPR has raised the bar significantly in terms of the expectations of all organisations that process personal data whether that data is under their control or processed under instructions from a data controller such as a school or university.

There will also be other data of immense value, important to the success of your business, adding to the significance of maintaining the highest levels of cyber security possible.

The United Kingdom's pioneering approach to the protection of children who access the Internet and use smartphone apps adds to the significance of this area in terms of having good data management and governance.

The advent of an Online Safety regime presents a further reason for many education businesses to spend time giving attention to requirements for compliance with legislation and guidance.

Add to this the explosion in access to AI tools and their potential to revolutionise products and services sold into the education and skills sector.

Whatever requirements you have and whenever they arise, Freeths can be on hand to help.  We've invested significantly including in technological solutions to assure our clients that we can respond rapidly and positively to issues that could cost a business dearly and place its reputation on the line.

Our data services

Compliance programmes - fixed or capped fee based delivery of required documentation and a helpdesk facility (optional). If you have concerns about the present state of compliance we can make a start with a fixed price audit of current documentation and procedures

Data Privacy Policies – for larger employers having a comprehensive policy statement is crucially important evidence under the accountability principle – ensuring that not just the business but also your people fully appreciate their responsibilities.

Data Subject Access Requests (“DSARs”)  - individuals have become more aware of their data rights since May 2018, and there has been a substantial increase in the number of DSARs that businesses have received since then. These DSARs not only present a compliance challenge but may also be the first sign of potential litigation against the business.  We provide a suite of DSAR support services to support clients, from initial triaging advice to full document review support using DSAR-trained lawyers and our IT review platform. As Freeths is a full-service law firm, we often work as part of a multi-disciplinary team. 

Data processing and sharing agreements – compliant with the requirements under UK GDPR including ICO guidance

International data transfers and third country due diligence – we can help you in addressing the complexities of securing compliant international transfers to a background of increasing due diligence requirements.

Managing major data breaches – a notable feature of our practice is our ability to respond rapidly to situations that arise, providing immediate attention and helping the client to develop the right strategies for any scenario encountered. 

Key contact

Luke Dixon's Profile

Luke Dixon

Partner & Head of Data & Information

Get in touch

Expert data privacy advice including:

Expert data privacy advice including:

  • Support for Data Protection Officers
  • Data Privacy Impact Assessments
  • Facial recognition and other biometric applications
  • Management of data breaches
  • Data subject access requests
  • CCTV systems and compliance
  • Management of personal data issues in Freedom of Information requests
  • International data transfers and representation in overseas territories
  • Compliance reviews prior to a potential investment in or exit from an education business

How we have helped our clients

  • Biometric data processing

    We have advised a client on its processing of biometric data as part of the roll-out. This project was one of the first of a new product. We advised the client on how to render its processing of biometric data compliant with UK GDPR and supported the client on the preparation of its Data Protection Impact Assessment for this project.

    Image of data
  • DSAR & freedom of information requests

    We advised a client in the education sector on its responses to DSAR and Freedom of Information requests in relation to an employment dispute with a former Head Teacher. We advised the client on its searching and reviewing of key documents, and collaborated with colleagues from our Employment team to support the client on the strategic aspects of this sensitive and contentious matter.

    Image of bioenergy
  • AI & GDPR

    An education software provider received an request from the Information Commissioner’s Office requiring responses to a series of questions relating to a key product sold to schools. The request was focussed on the use of artificial intelligence based decision-making within the product and required responses to questions touching on the processes that the client had in place that underpinned compliance of the product with GDPR. Freeths supported the client in responding and helped the client secure a clearance from ICO confirming that ICO had no observations or concerns relating to the processing of personal data through the product.

    Image of AI

Related news & articles

Subscribe to receive our updates
1 of 1
  • Article

    ICO opens consultation on draft recruitment and employee records guidance

  • Article

    EDPB rules Meta’s advertising practices unlawful

  • Article

    European commission publishes first review of pre-GDPR EU adequacy decisions

  • Article

    AI news: EU reaches landmark agreement on Artificial Intelligence Act

  • Article

    UK NCSC publishes guidelines for secure AI system development

  • Article

    ICO Guidance Overview: Lawfully Monitoring Workers

Get in touch

Contact us today

Whatever your legal needs, our wide ranging expertise is here to support you and your business, so let’s start your legal journey today and get you in touch with the right lawyer to get you started.


Get in touch

For general enquiries, please complete this form and we will direct your message to the most appropriate person.