Skip page header and navigation

Cyber Risk Lawyers

Supporting you to address cybersecurity concerns

Cyber security experts

Expert cyber security lawyers

Cybersecurity is complex, costly and difficult to manage. The frequency, complexity and severity of cyber attacks are increasing and in response, governments around the world are taking a much more proactive approach to the regulation of cyber risk.

It is important for all organisations to ensure they have a plan in place to address cyber risk. It is no longer enough to rely on cyber insurance; instead organisations must proactively take steps to embed risk management processes into their systems. Failure to do so risks loss of information, lack of access to critical business systems, business disruption, reputational damage and potentially a fine from regulators including the Information Commissioner’s Office and claims from third parties.

Our team of expert lawyers advise all types of organisations on putting in place measures to protect against cyber risk and on the issues arising from cyber security breaches.

How we can advise you

We can advise you on all cyber incidents. We work closely with specialist cyber consultants and can provide an integrated cyber advice/support service. We can help with:

  • Cyber resilience
    • Advice on compliance with regulatory requirements including the UK’s Network & Information Systems Regulations for the provision of essential services, the EU’s Digital Operation Resilience Act and the evolving requirements of regulators across the world as appropriate
    • Advice on putting in place risk management processes, including drafting policies and procedures, board and staff training, and reviewing insurance policies
    • Compliance with FDA and MHRA cyber security requirements for medical devices
    • Compliance with NHS cyber security requirements including the specific data security standards which suppliers of public healthcare services must comply with
  • Cyber response
    • Dealing with the consequences of a cyber attack and data breaches, including an integrated service for technical support, forensic investigation, liaising with regulators and law enforcement
    • Communications strategy and reputation management
    • Claims and prosecutions

Our recorded webinar below looks at the current cybersecurity and risk management landscape, including the increasing requirements of regulators, regulatory enforcement, and what businesses in all sectors can do to manage cybersecurity risk in line with regulatory compliance. We advise on these issues across all sectors, and our team would be happy to answer any questions you may have.

Playing this video will set non-tracking cookies from YouTube/Google

  • How our team will work with you

    We provide fully comprehensive support to our clients on cyber issues wherever and whenever they arise. Whatever the scenario, our support is sensitive, pragmatic and timely. The services we provide include:

    • Ad hoc advice on specific queries, including distilling complex and technical regulatory issues into clear, pragmatic and applied advice
    • Developing risk management compliance strategies, solutions and action plans
    • Acting in all types and at every stage of investigations, enforcement action, and prosecution, including regulatory, disciplinary, criminal proceedings, including representation in interviews/investigations and at courts and in tribunals
    • Providing advice and representation in relation to group litigation and class action compensation claims, claims by or against service providers and urgent court remedies against the wrongdoer 
    • Undertaking specialist due diligence in corporate transactions, for investors, buyers and sellers
    • Providing training and sharing knowledge
  • Our experience

    Advising a number of medical businesses on the consequences of a cyber attack on the supplier of their practice management system.

    Providing urgent advice to a large plc client following a phishing attack on one of its divisions, including breach notification to the ICO and data subjects

    Advising and acting in claims for compensation under the Data Protection Act, UK GDPR and Human Rights Act arising from a data breach

  • Our clients

    Our clients include all types of private and public sector businesses.

    Both UK and US insurers and brokers, as well as policyholders, come to us for advice on cyber risks and data protection. Our clients include Aspen, Chubb, Aviva, RSA, QBE, Elstree Film Studios, and many others.

  • Our resources

    We have written and recorded multiple resources examining Cyber Security issues that affect all sectors – click here to view our materials.

Key contacts