Strategies that make the most of technology bring significant efficiencies and growth opportunities, but also a range of risks.
Our global cyber and data security team has an unrivalled breadth and depth of expertise and includes specialists from our data privacy, dispute resolution, financial services regulatory, corporate crime and investigations, insurance and employment practices, amongst others.
As a global full service firm, we are able to advise on cyber security issues wherever they may arise, and simultaneously across multiple jurisdictions where an incident requires it. We work closely with third party experts, such as forensic consultants, PR consultants etc., as needed to manage data incidents.
Our team advises across the full cyber security lifecycle, including before-the-event cyber risk management and advisory, incident response (including data breaches) and non-contentious transactional and project work.
Find out more about that here.
We have also developed an in-house software tool and workflow which allows us, efficiently and cost-effectively, to identify the personal data that has been compromised in a data breach and the risk to individuals concerned.
| SUBSCRIBE TO OUR CYBER AND DATA SECURITY BLOG |
| DOWNLOAD OUR UK PRACTICE BROCHURE |
| DOWNLOAD OUR DATA BREACH RESPONSE AND ANALYTICS BROCHURE |
| LISTEN TO OUR CYBER AND DATA SECURITY WEBINARS |
     |
DATA BREACH ANALYTICSWe have developed an in-house software tool and workflow to work as part of our multi-disciplinary approach which helps us, efficiently and cost effectively, to identify the personal data that has been compromised and the risk it poses to the individuals concerned. This will put structure around unstructured data by rapidly identifying the most significant and sensitive personally identifiable information and prioritising that for review. The tool helps to identify where the affected data subjects are and helps produce distribution lists for subsequent notification, thereby providing not only a swift decisive response to the incident but also aiding compliance with the GDPR and other international data protection regulation. Our software and workflow brings together our global legal experts, our global Alternative Legal Services document review teams and Legal Process Management teams to provide a seamless and cost effective process. This complements our best-in-class document review platform (Relativity) which offers powerful predictive coding and keyword searching capabilities to assist in the review of the compromised materials. |
Data has evolved to become the lifeblood of global trade. Data connects almost every aspect of modern life, and the commercial value and opportunities attributed to data have increased dramatically in ways that were not previously possible.
Assisting on privacy law reform, big data analytics, loyalty programs, privacy training, regulatory investigations, direct marketing and targeted advertising across multiple channels including email, web, social media and mobile apps.
Assisting in relation to all aspects of its data breach involving customer information, including liaising with regulators in four countries, advising the board, preparing external communications and reviewing relevant agreements.
We are appointed as the sole APAC and EMEA cyber security counsel to a global financial services company to assist in managing cyber security risks and incidents across 26 countries.
We are the preferred cyber security legal counsel to an energy multinational, advising globally.
We acted for a global company in relation to incident response following the inadvertent disclosure of the entirety of its global HR database to an unrelated third party by one of its cloud service providers. The incident affected employees in multiple jurisdictions across Australasia, Europe and the Americas. Herbert Smith Freehills London coordinated the global response (engaging local counsel where required).
We advised a global investment bank in relation to a cyber security incident which saw US$40 million taken from a number of accounts, including reporting to and subsequent liaison with the relevant regulators, and on litigation by the account holders seeking to recover their losses from the bank.
