Bristows LLP

Mark Watts

Mark is a technology specialist with over 20 years’ experience. He advises companies on technology issues such as cloud computing, machine learning, apps and facial recognition. Much of Mark's experience was gained in-house at IBM where he held various roles, including Global Data Privacy Counsel. Mark has particular expertise in data privacy. He advises multinational companies on implementing General Data Protection Regulation compliant programs, Privacy Shield and Binding Corporate Rules. Mark has been involved in many of the most high profile and highest value data privacy litigation in the world and regularly advises companies in relation to incident response and defending regulatory enforcement actions all over the world.

Jamie Drucker

Jamie specialises in data protection and privacy law. Jamie’s practice includes advising clients on a wide range of privacy and data protection issues, including on the adoption of privacy strategies, assessing privacy risks in the context of new lines of business and the adoption of new technologies, notification and consent issues, individual rights requests, annonymisation, and data processing and transfer agreements. He has particular expertise advising clients on ad-tech compliance issues, in terms of navigating ePrivacy and GDPR requirements in the context of data collection, online tracking and profiling. Jamie also has experience in drafting Binding Corporate Rules (BCRs), both for processors and controllers, and in helping clients to navigate the complex BCR application and review process. Jamie also helps clients respond to data breach incidents, and defend regulatory enforcement action across Europe. He has also worked on high profile data protection litigation in the English High Court.

Marc Dautlich

Marc is a technology specialist with over 25 years’ experience gained in private practice, as well as inhouse at Equifax and on secondments at Microsoft. He advises clients in the technology, financial services and life sciences sectors on data protection, cyber risk and digital matters. Marc helps clients to evaluate and manage data protection and cyber risk in cross-border compliance programs, in technology projects involving the development of machine learning/artificial intelligence, Internet of Things, cloud applications, in life sciences and medical device projects covering healthcare apps, remote diagnostics, clinical trials and investigations and genomic research, and in the financial services sector across the lifecycle of product development and FinTech applications. Marc also advises on cyber security incidents, and regulatory investigations and disputes involving data protection, misuse of private information and breaches of confidentiality, and has experience of devising voluntary redress schemes for individuals affected by such misuse or breaches. Marc advises on both UK and EU law, covering GDPR and the Data Protection Act 2018, the proposed ePrivacy Regulation, the Network and Information Systems Regulations, the Freedom of Information Act and Environmental Information Regulations, Investigatory Powers legislation and the data protection and security aspects of financial services legislation and regulation (such as PSD2 and the SYSC rules in the FCA Handbook). Marc has a good working knowledge of German and Swedish.

Hannah Crowther

Hannah advises on all areas of data protection and privacy law, helping multinational and UK organisations navigate the changing landscape of EU and UK data protection law including the General Data Protection Regulation (GDPR) and ePrivacy. Hannah's practice covers a wide range of EU and UK data protection and privacy issues, including ‘accountability’, data transfers, Binding Corporate Rules, adtech, data subjects rights, Artificial Intelligence and direct marketing.  Her practice also includes a significant amount of contentious work, advising clients on managing personal data breaches and enforcement by the UK Information Commissioner’s Office (ICO) and other EU data protection authorities, including the CNIL and Irish Data Protection Commission. Hannah is also increasingly advising in the growing area of data protection litigation, assisting with cases before the UK courts and the Court of Justice of the European Union. In 2014 Hannah spent three months on secondment working in the Privacy team of a US law firm in Seattle, where she gained a valuable insight into data privacy law from a US perspective.