Recommendations

  • Recommended for sports-related data protection

    Legal 500 2018

  • "Lucas has been integral to our entire internal GDPR preparation and success"

    Client feedback - 38 Degrees

  • "The advice he provided us was to such a high standard that we were recognised by the BBC's Daily Politics Show"

    Client feedback - 38 Degrees

  • "Lucas continues to impress us with his professionalism and approach to work, as well as being an all-round enjoyable partner to collaborate with."

    Client feedback - 38 Degrees

Experience

I am a specialist data privacy lawyer – my life became a lot more interesting once the GDPR came into force!

I advise on all aspects of data privacy and e-privacy law at UK, EU and global levels. Work that I typically do ranges from preparatory (drafting compliance and accountability documentation; advising how to carry out compliant fundraising and marketing campaigns, analysing how planned projects involve using personal data and carrying out impact assessments) to after-the-incident response (managing data security incidents, advising on compliance with requests to exercise individuals’ rights and handling complaints to / investigations by the ICO).

I particularly enjoy working on unique, specialist or offbeat projects – recent examples include advising on the crossover between data privacy law and artificial intelligence; advising on how to report information about an individual’s involvement in illegal arms trading to relevant authorities which was discovered during a research project and advising on how to comply with the obligation of transparency when providing essential services to displaced on the ground in different jurisdictions.

I also regularly provide specialist and bespoke training and updates in person (sometimes assisted by my dog, Morty).

Given that data privacy law has such a broad application, I work with lots of different clients. I particularly enjoy working with organisations in the music, entertainment and sports industries, as well as activist and campaigning organisations and charities; but I have also worked with clients in the retail, education, creative, real estate, technology, legacy and finance industries; as well as political parties and public bodies.

Recent projects

  • I advised a campaigning platform on how to comply with data privacy law when designing and carrying out a UK-wide online quiz to canvas participants’ opinions about how to resolve issues related to Brexit.

    The answers generated would be forwarded to local MPs to encourage discussion between MPs and their constituents and to give respondents a recognised channel to have their opinions heard. We helped to structure the quiz so that affected individuals were made aware of (and asked to give consent to) how cookies were used, there was an option of providing anonymous responses where desired and that the client understood its increased obligations when collecting data on individuals’ political opinions.

  • I’ve advised numerous organisations on the use of Facebook Custom and Lookalike Audiences to carry out fundraising and supporter engagement programs.

    Given the publicity surrounding allegations as to Facebook’s contravention of data privacy law, we advised clients to take a cautious approach and carry out detailed data protection impact assessments, and explained how recent decisions (and draft future e-privacy law) suggested that data protection authorities would expect organisations to obtain affected individuals’ prior opt-in consent, even if applicable law – as currently in force – gave rise to a “grey area” which some organisations have used to argue that consent is not yet required to use the programs.

  • I drafted a legitimate interests assessment for a client planning to operate an internal salary transparency scheme.

    We explained to the client that, while salary information is not special category (i.e. sensitive) personal data for the purposes of the GDPR, some affected individuals may expected such information to be handled with due sensitivity or confidentiality. We therefore helped the client to identify why it considered the scheme important bearing in mind its aims and ideals, how it would help the organisation, its employees and its members, identify the potential impact on affected individuals’ rights to data privacy and methods to minimise that impact as far as possible.

  • I advised an international charity on the data privacy aspects of a high-profile regulatory investigation
  • I’ve assisted various clients to respond to subject access requests, in particular advising on available exemptions under the Data Protection Act 2018
  • I helped a charity liaise with the ICO in relation to a data security incident arising from hacking activity by Lauri Love
  • I advised a charity on whether information about an individual’s changing gender identity constituted special category personal data for the purposes of the GDPR
  • I advised on the data privacy law aspects of a mergers, demergers and other corporate reorganisations
  • I advised a start-up on the e-privacy implications of developing a mobile app which connects volunteers to elderly individuals looking for assistance
  • I assisted an international group of humanitarian crisis response organisations to understand the applicable data sharing relationships between the organisations, and drafting international data sharing / processing agreements accordingly
  • I drafted a suite of compliance documentation for a sports grant and funding body
  • I advised a charity on the data privacy law impact of operating a program which offers bespoke assistance to schools and local education authorities to help understand the causes of, and thereby reduce, exclusion of pupils
  • I advised various clients on how to carry out background checks and safeguarding investigations while simultaneously complying with data minimisation and retention obligations.

Qualifications and career

  • University College London, BA (Hons) History (including semester abroad at University of Pennsylvania)
  • College of Law, LLB
  • Former signed musician and broadcast journalist for BskyB and BBC
  • Trained at Hill Dickinson
  • Worked in London and Singapore as an international trade lawyer before specialising in information law
  • Joined Bates Wells as a solicitor, 2017
  • Promoted to Associate, 2018

Pro bono, memberships, and appointments

  • Mission RASI Legacy Committee
  • Pro bono adviser to and member of the Mission to Seafarers