Gemma is a data and technology lawyer, specialising in data protection and privacy, cybersecurity, and digital regulation. She advises emerging and leading companies on compliance with UK and EU data protection legislation, such as the General Data Protection Regulation, UK Data Protection Act and the e-Privacy Directive.

Her practice covers a wide range of data protection related issues, including advising clients on day-to-day data protection compliance, product counselling, drafting data sharing agreements, advising on international data transfer requirements, and compliance with direct marketing and cookie laws. She also advises on the increasing intersection between privacy and other digital regulation, such as the Digital Services Act, Digital Markets Act and Online Safety Act.

Gemma’s practice also includes advising clients on responding to regulatory investigations led by data protection authorities, and handling personal data breach incidents.

Gemma advises clients in a broad range of sectors, but with a particular focus on clients working in the technology sector.

Some of Gemma’s work highlights include:

• Advising a large technology company on compliance with EU and UK data protection law with respect to the roll-out of an e-commerce feature.
• Advising a client on data protection compliance with respect to the use of generative AI tools for various use cases.
• Acting for a large advertising platform on a range of privacy compliance issues.
• Advising an e-commerce company on the intersection between the GDPR and the Digital Services Act.