Lawyers

Dave Hughes

Work Department

Dave works in the Privacy and Cybersecurity team, working closely with clients across all aspects of these areas of work. This includes planning, implementing and managing GDPR and ePrivacy compliance programmes, advising on remediation and the management of regulatory investigaitons and enquiries. Dave has worked with a large number of multi-national clients across diferent sectors on implementing practical, risk-based standards of compliance alongide effective, accessible and clear documentation. In particular, Dave spends much of his time assisting clients to manage and mitigate security breaches, advising on the need to report to the ICO (as well as other UK and overseas regulators), assisting clients in liaising with those interested parties and affected individuals (where appropriate) to reduce risk and potential liability. Dave's relevant recent experience includes: Working with an international consumer business to develop and implement a GDPR audit, identify gaps and prioritise risks and then preparing documentation in line with a compliance roadmap of key risks. Working with a global consumer group, as part of their GDPR Steering Group, identifying key risks and preparing key documentation with a specific focus on customer fair notice, consent, data sharing and marketing practices (in line with the draft ePrivacy Regulation). Advising on the lawful nature of the marketing databases and future strategic marketing plans. Dave writes articles on both data protection and freedom of information and is a regular speaker at both internal and external training events in this area. Dave also created the Eversheds Sutherland @ESPrivacy Twitter account.

Position

Partner