Lawyers specialising in data protection and digital law
- Advice on data protection projects (GDPR and LOPDGDD) and privacy measures tailored to the company’s sector and activities.
- Advice on the legal basis for processing personal data from customer, employee and user databases, as well as the correct use, reuse and transfer of such data.
- Adaptation and implementation of regulatory compliance policies in the digital sphere.
- Privacy by Design and by Default protocols and policies.
- Legal support in the management and reporting of data breaches.
- Conducting Personal Data Protection Impact Assessments (PIPAs).
- Audits relating to data protection and information security.
- Specialised training delivered by lawyers specialising in data protection and cybersecurity.
- Legal assistance in relation to proceedings, requests and sanctions issued by the competent supervisory authority (in Spain, the Spanish Data Protection Agency or regional authorities).
- Tendering: legal advice on data protection in public procurement. Tender specifications and liability for data processing.
- Advice on data protection and privacy projects tailored to the public sector.
- Development of Open Government projects for the public administration (transparency, public participation and the re-use of public information).
- Development of and support for the implementation of transparency regulations within the public administration (active and passive transparency).
- Support with compliance with personal data protection requirements in public procurement.
- Establishment of and support for procedures relating to requests for access to public information.
- Projects involving the reuse of information (Data Sharing, B2G, B2B, G2B, G2G).
- Advice on processes for anonymising and securing personal data to facilitate its free movement and use.
- Legal support for the launch and development of Big Data projects.
Law relating to new technologies and Artificial Intelligence
- Legal support in drafting contracts for Artificial Intelligence projects in accordance with the AI Act
- Definition/updating of internal policies on the use of Artificial Intelligence within the company: responsible use, roles and responsibilities, approvals, lifecycle, traceability and control.
- Training to ensure a sufficient level of Artificial Intelligence literacy amongst staff and third parties.
- Assessment of the risks and obligations inherent in each Artificial Intelligence model or system: prohibited uses, transparency risks and high-risk scenarios.
- Identification of the company’s role as a provider of an Artificial Intelligence system or as the party responsible for its deployment, and analysis of its obligations.
- Support with risk management and regulatory compliance for high-risk Artificial Intelligence systems.
- Adoption of governance measures.
- Review, support and implementation of security policies.
- Development of policies on the retention, preservation and destruction of information.
- Management of cybersecurity and information risks.
- Adoption of proportionate organisational measures to manage cybersecurity risks.
- Reporting of cybersecurity incidents to the relevant competent authority.
- Training on cybersecurity risks. Awareness and education programme.
- Drafting and/or reviewing legal texts: legal notice, privacy policy and cookies policy.
- Drafting legal texts tailored to the company’s identity and business activities.
- Drafting and/or reviewing Terms and Conditions of contract or sale.
- Advice on contracting with technology suppliers.
Contact with lawyers specialized in Data Protection
Our lawyers specialized in Data Protection and privacy are at the cutting edge of regulations related to digital law and new technologies. To implement digital compliance correctly, in terms of the use of personal data, privacy and cybersecurity, the best strategy is to rely on trustworthy specialized teams such as ours.
Sentencias del ámbito de la Privacidad y Notas de Actualidad
Abril 2024 - Modelos de consentimiento o pago
Julio 2023 - Actualización de la AEPD sobre la Guía de Cookies
Julio 2023 - Nuevo marco legal para transferir datos personales entre UE y EE. UU.
Junio 2023 - La AEPD emite un informe jurídico sobre la figura del responsable de tratamiento de datos
Marzo 2023 - Nuevas orientaciones para cookies y analítica web en portales de Administración Pública
Enero 2023 - Nuevas reglas para el banner de cookies
Febrero 2022 - Alerta de privacidad: uso de Google Analytics y transferencias de datos a Estados Unidos


Si buscas prácticas o empleo en esta área de práctica, envía tu CV desde nuestro portal