Katie Hewson

• Advised Exscientia, an AI drug discovery company, on a wide ranging data protection review.
• Advised S&P Global on a wide variety of data protection issues, notably the significant data protection impacts of its merger with financial information services provider, IHS Markit.
• Advised S&P's Platts division, which provides energy and commodities information and a source of benchmark price assessments in the physical commodity markets, on a wide-ranging data protection compliance project.
• Advised Mizuho Bank on updating its internal data transfer agreement between its various entities and branches on a global scale to take the new SCCs and the new UK Addendum into account.
• Advised Neuberger Berman on all aspects of its UK data protection compliance, including its data protection terms, policies and procedures, such as new requirements for international transfers of personal data from the UK and usage of cookies.
• Advised transport company Abellio on its group-wide data protection project in which new policies and procedures are being drafted and implemented by all Abellio's operating companies. This involved drafting a full suite of bespoke policies and procedures.
• Advised Swire Shipping on the sharing of data within its international group.
• Advised an international bank on its GDPR compliance programme, providing a full suite of services including close involvement in the bank's data mapping exercise and gap analysis. Continues to advise as the programme matures.
• Advised a leading wellbeing chain in response to an ICO investigation into its direct marketing practices.
• Advised a financial institution on a data breach that resulted in hackers gaining unauthorised access to extremely sensitive personal data, which resulted in a third party being exposed to a significant financial loss. This included advising on all aspects of incident response including making relevant notifications to affected data subjects, the ICO, insurers, and the police, and potential disputes with third parties.
• Provided data privacy advice and drafted terms for a leading pharma company's healthcare apps.
• Advised in relation to two substantial representative actions against major technology companies arising from potential systemic breaches of data protection legislation, including in relation to children's data.
• Helped an airline handle a high profile data subject access request that was subject to extensive publicity.
• Advised a leading high street retailer on GDPR compliance and documentation for employee and customer personal data.
• Advised an international transport company on its approach to direct marketing campaigns.
• Advised a life sciences company on data protection issues relating to clinical trials, market research, ad tech and social media disease awareness campaigns.

Katie Hewson acts as an extended member of our in-house legal team. I know the advice I receive from Katie will take into account the risks and concerns of our particular business. Katie knows there is no one size fits all, and she takes time to understand the business and our risk appetite. She is an invaluable resource.