Data & Privacy

We treat data as an asset.

We understand that the right approach to data & privacy can be a real asset to your organisation. We also recognise the impact that good data & privacy practices can have on wider society.

We advise on data & privacy compliance across all sectors of the economy, from tech startups to established businesses, charities, not-for-profits and the public sector.  We are experts on the UK’s post-Brexit legal landscape as well as on the EU’s frameworks and new legislative proposals including on AI.  We also have an international perspective and have helped organisations operating in multiple jurisdictions to navigate complex supply chains and regulatory requirements.

We know that you need advice that lets you carry on doing what you need to do. We bring clear solutions and pragmatic guidance.

How we help

We help our clients navigate the requirements of data & privacy while realising the opportunities. Beyond advising on data, privacy and e-privacy law, we advise on the Freedom of Information Act 2000, confidentiality and more.

Our approach is pragmatic, practical, efficient and commercial. We understand your objectives, advise on the privacy compliance framework and the potential implications of using data.

We can support you with assessments, responses to requests and devising strategies for compliance. And if you’ve had a data security breach, we can assist straight away to support you.

We can also work with you to conduct a data protection health check, which is a valuable exercise whether you are looking to draft policies from scratch or review existing policies to ensure they are meeting compliance and regulatory requirements. Find out more about our data protection health check packages here.

Explore

Briefing for Charities & Social Enterprises | 22 September

Our weekly roundup of news and updates from across the sector. To help you navigate this week’s content, the links below will take you straight to content by topic. Charity Commission The Charity Commission has updated its charity accounts guidance to reflect the introduction of SORP 2026 and changes to accounting thresholds which come into …
Read more

When AI becomes a management tool: what are the employment law implications?

AI is fast becoming embedded in day-to-day people management. Employers are experimenting with algorithmic tools to shortlist candidates, score interviews, allocate shifts, forecast demand, monitor productivity, flag performance issues, support redundancy exercises and even trigger investigations and dismissal processes. Whilst in recent years, the adoption and integration of AI has been concentrated in large tech …
Read more

Briefing for Charities & Social Enterprises | 8 September

Our weekly roundup of news and updates from across the sector. To help you navigate this week’s content, the links below will take you straight to content by topic. Charity Commission Charity Commission CEO David Holdsworth has written a guest blog for New Philanthropy Capital about impact reporting for charities. The blog looks at how …
Read more

Bates Wells discusses cybersecurity tips for schools with Independent Schools Management Magazine

Rayhaan Vankalwala and Nneka Cummins have published an article in the Independent Schools Management Magazine, August 2026 edition. Their article “Cybersecurity tips for schools” sets out the key questions that schools should be asking themselves to ensure they are protecting the personal data they hold appropriately. With the fast pace of technology and the new …
Read more

Breaking down cookies: a guide

One of the main practical changes introduced by the Data (Use and Access) Act 2025 (the “DUAA”) relates to cookies and similar technologies (which we refer to collectively in this blog as “cookies”). With this in mind, we wanted to take the opportunity to demystify the rules around cookies under UK data protection law, and …
Read more

“The advice and guidance Bates Wells provides is always clear, direct and focused on our needs.”

Data Protection, Chambers 2026

“Bates Wells’ data protection team stands out for their fast response times, strong expertise, and focus on practical, right-sized solutions.”

Data Protection, Chambers 2026

“Eleonor and her team have deep insight into the data protection landscape in the UK, having been involved in its creation and implementation. They provide expert advice tailored to the commercial needs of their clients, so a practical solution is landed on.”

Data Protection, Legal 500 2026

“Deep technical insight blended with the right commercial instincts. They quickly hone in on what really matters.”

Data Protection, Legal 500 2026

“They have a fantastic knowledge of the law and are able to come up with pragmatic solutions to any matter I raise.”

Data Protection, Chambers 2025

“The firm is responsive, patient and collegial.”

Data protection, Chambers 2025

“Responsive, thorough, clever, and detail-oriented.”

Data protection, Legal 500 2025

“Excellent and timely data protection advice.”

Data protection, Legal 500 2025

“The expert legal advice Bates Wells’s team provides is well informed by business realities and an understanding of facts on the ground.”

Data Protection, Chambers 2024

“Their drafts of legal advice were always to a very high standard and they took on board feedback very effectively, which all led to the strengthening of our position.”

Data Protection, Chambers 2024

“They are clearly very knowledgeable.”

Data Protection, Chambers 2024

‘The team is attentive to our needs, understands our business and what makes us unique. Their advice is commercial and balances risk well.’

Data Protection, Legal 500 2024

‘Bates Wells is extremely innovative and client-focused. The firm has a very clear identifiable vision about its role and values in delivering their services.’

Data Protection, Legal 500 2024

‘Bates Wells gives very practical and timely advice on privacy matters, in a manner that is understandable to non-experts.’

Data Protection, Legal 500 2024
Meet our team