Data Protection & GDPR

It is increasingly important for businesses to embed privacy, by design and by default, into every aspect of your activities.

Our approach is to build a deep understanding of the specifics of your business so we can identify your data protection issues throughout the duration of your customer and employee relationships as well as the lifecycle of your company.

Our comprehensive services include:

  • Process: legal advice around process improvements for established businesses
  • Documentation review: to ensure existing privacy statements and contracts are compliant with current and future legislation
  • Breaches: breach notification to the ICO, navigating fallout with stakeholders, dealing with threatened claims and litigation against providers in your supply chain
  • International: assisting international clients to understand their obligations when they are processing the data of EU citizens
  • Start ups: advisory work to ensure that the complex legislative regime around data protection is adhered to from the ground up

Discover our range of GDPR focused alerts which provide legal insight into how to get regulation ready.

GDPR Countdown
Are you regulation ready? Check our GDPR Countdown to see how long is left on the clock!


We act for a diverse range of domestic and international clients, from start-ups to multinationals, and everything from tech companies leveraging big data in their service offerings through to charities navigating a response to a subject access request for the first time.

Case studies

Advised a US-based cloud company on the validity of their data protection provisions under English law

Advising a provider of technology-backed healthcare services in connection with the processing of sensitive personal data and drafting documentation to support their processes

Reviewing the document suite of a national provider of insurance-related services through a web portal in connection with GDPR compliance

Advisory and data breach notification work following a hack of a US-based business with a significant percentage of its customers located in the UK and EU

Investigation and pre-litigation correspondence in connection with the data theft of commercially sensitive business and personal information by a “bad leaver”

David Hosford Pitmans Law Pensions Partner

David Hosford

Partner, Data Protection

D +44 (0)118 957 0363
M +44 (0)778 626 6404

Angela Shields Pitmans Law Employment Partner

Angela Shields

Partner, Data Protection

D +44 (0)118 957 0450
M +44 (0)788 195 1362

Chris Netiatis Head of Pensions at Pitmans Law

Chris Netiatis

Partner, Data Protection

D +44 (0)207 634 4659
M +44 (0)782 521 9430

Jonathan Gray

Jonathan Gray

Partner, Data Protection

D +44 (0)23 8083 7785
M +44 (0)782 594 0525

Philip Weaver

Philip Weaver

Partner, Data Protection

D +44 (0)118 957 0441
M +44 (0)797 990 3933

GDPR toolkit

Download our GDPR toolkit for access to our GDPR seminar delegate pack and practical tools including a 10 step action guide and a 5×5 risk assessment checklist.

Our guidance aims to get you regulation ready by sharing how we are complying as a business as well as providing legal insights.


“The firm’s performance is excellent, I can’t fault it.”

Chambers & Partners

“They are diligent and very thorough. They go beyond the call of duty.”

Chambers & Partners

“They are willing to go the extra mile for the relationship. You get a City performance from a regional office.”

“I can’t thank you enough. Your concise, pertinent and elegant advice exemplified everything that makes English law the envy of the world.”

Director, Roll on Friday