Felicity is currently assisting a number of clients in their preparations for the EU General Data Protection Regulation. She also regularly advises clients on a broad range of data protection and privacy issues, including multi-jurisdictional privacy projects, data protection clauses, international transfers, the use of consent and other lawful grounds for processing, and the assessment of data protection risks of new projects. Felicity has recently been called upon to comment on issues relating to data protection in the trade news, as well as giving talks and presentations.

Her experience includes, for example, advising:

• Major logistics and shipping companies (including holding companies) – on compliance with GDPR, including conducting a data audit, drafting or updating appropriate policies, and on the transfer of data. 
• Main-market and AIM-listed financial services companies – on issues including making appropriate amendments to terms of business to ensure compliance with GDPR.
• A specialist recruitment company – on all aspects of preparation for the GDPR, including assisting with carrying out a detailed information audit, updating policies and information handling processes, and updating its suite of contracts. 
• A national flag carrier airline – on a review of the commercial provisions of a promotional deal that the airline wanted to launch, with a particular focus on the data protection and privacy issues that it raised and ensuring the correct consents were in place.
• A leading multinational electronics company – on a review of privacy and data protection laws in eight Latin American jurisdictions following the company’s expansion, enabling it to have one privacy policy for all jurisdictions. 
• A world leader in pharmaceutical logistics – assisting the company with a data protection audit, and ensuring that its data protection policies, documents and procedures were compliant with data protection legislation.  
• A Swiss investment holding company – on data protection issues in the context of a corporate acquisition.
• A large Croatian leisure group – on the negotiation of complex provisions relating to data protection and privacy after the company signed an important franchise agreement, with a focus on which company would own the personal data of the guests during their interaction with the two companies.
• A national flag carrier airline – on a review of the commercial provisions of a promotional deal that the airline wanted to launch, with a particular focus on the data protection and privacy issues that it raised and ensuring the correct consents were in place.
• A privately-owned luxury cruise line – in connection with its marketing strategy and the impact on its privacy policy, including assisting with an extensive review of the company’s email policy from a privacy perspective and providing recommendations from an EU law standpoint.
• A worldwide travel agency – on highly specialised data protection advice concerning the implications of requiring ground handlers to take copies of passengers’ passports.
• A specialist underwriter – focusing on obtaining the necessary consents for an ambitious electronic marketing project.
• A leading non-governmental international organisation – on the data protection elements of the establishment of operations in Greece to deal with complaints from Greek victims of an oil spill. 
• A Swiss investment holding company – on data protection issues in the context of a corporate acquisition.
• A leading UK airline – in connection with a particularly complex and sensitive Subject Access Request.