Data & Privacy

We treat data as an asset.

We understand that the right approach to data & privacy can be a real asset to your organisation. We also recognise the impact that good data & privacy practices can have on wider society.

We advise on data & privacy compliance across all sectors of the economy, from tech startups to established businesses, charities, not-for-profits and the public sector.  We are experts on the UK’s post-Brexit legal landscape as well as on the EU’s frameworks and new legislative proposals including on AI.  We also have an international perspective and have helped organisations operating in multiple jurisdictions to navigate complex supply chains and regulatory requirements.

We know that you need advice that lets you carry on doing what you need to do. We bring clear solutions and pragmatic guidance.

How we help

We help our clients navigate the requirements of data & privacy while realising the opportunities. Beyond advising on data, privacy and e-privacy law, we advise on the Freedom of Information Act 2000, confidentiality and more.

Our approach is pragmatic, practical, efficient and commercial. We understand your objectives, advise on the privacy compliance framework and the potential implications of using data.

We can support you with assessments, responses to requests and devising strategies for compliance. And if you’ve had a data security breach, we can assist straight away to support you.

Explore

Briefing for Charities & Social Enterprises | 14 April

Our weekly roundup of news and updates from across the sector. To help you navigate this week’s content, the links below will take you straight to content by topic. War in the Middle East Charity Finance Group is seeking feedback from charities about how the war is affecting its members and how CFG can best support …
Read more

Briefing for Charities & Social Enterprises | 24 March

Our weekly roundup of news and updates from across the sector. To help you navigate this week’s content, the links below will take you straight to content by topic. Charity Commission Approach to regulating large and small charities The Commission’s Chief Executive David Holdsworth has taken part in a podcast about regulation (which is available …
Read more

The new charitable ‘soft opt-in’ now in force as of 5 February 2026

Changes to how charities can contact supporters It is not often that new data protection law actually makes it easier to do things. But that is the case with the Data (Use and Access) Act (‘the DUAA’). The legislation makes it easier for charities to contact existing supporters by e-mail and text message by extending …
Read more

New powers give charities another way to recover money lost to crime

Charities that have been the victims of fraud or cybercrime should be looking at the full range of options at their disposal to recover funds through the courts. People say they never forget that sickening feeling when they realise they have been the victim of a fraud or scam. When the victim is your charity, …
Read more

Is your charity under a new legal duty to prevent fraud? 

From 1 September 2025, some charities will face a new compliance obligation under the Economic Crime and Corporate Transparency Act 2023: the corporate offence of failure to prevent fraud. This legislation is designed to hold large organisations accountable when individuals acting on their behalf commit fraud, intended to benefit the charity or its beneficiaries, and …
Read more

“The advice and guidance Bates Wells provides is always clear, direct and focused on our needs.”

Data Protection, Chambers 2026

“Bates Wells’ data protection team stands out for their fast response times, strong expertise, and focus on practical, right-sized solutions.”

Data Protection, Chambers 2026

“Eleonor and her team have deep insight into the data protection landscape in the UK, having been involved in its creation and implementation. They provide expert advice tailored to the commercial needs of their clients, so a practical solution is landed on.”

Data Protection, Legal 500 2026

“Deep technical insight blended with the right commercial instincts. They quickly hone in on what really matters.”

Data Protection, Legal 500 2026

“They have a fantastic knowledge of the law and are able to come up with pragmatic solutions to any matter I raise.”

Data Protection, Chambers 2025

“The firm is responsive, patient and collegial.”

Data protection, Chambers 2025

“Responsive, thorough, clever, and detail-oriented.”

Data protection, Legal 500 2025

“Excellent and timely data protection advice.”

Data protection, Legal 500 2025

“The expert legal advice Bates Wells’s team provides is well informed by business realities and an understanding of facts on the ground.”

Data Protection, Chambers 2024

“Their drafts of legal advice were always to a very high standard and they took on board feedback very effectively, which all led to the strengthening of our position.”

Data Protection, Chambers 2024

“They are clearly very knowledgeable.”

Data Protection, Chambers 2024

‘The team is attentive to our needs, understands our business and what makes us unique. Their advice is commercial and balances risk well.’

Data Protection, Legal 500 2024

‘Bates Wells is extremely innovative and client-focused. The firm has a very clear identifiable vision about its role and values in delivering their services.’

Data Protection, Legal 500 2024

‘Bates Wells gives very practical and timely advice on privacy matters, in a manner that is understandable to non-experts.’

Data Protection, Legal 500 2024
Meet our team