Joanna E. De Fonseka

Recent experience includes:

• Advising clients in a wide variety of industries (including technology, consumer goods and retail, financial services and healthcare) on GDPR compliance, including conducting compliance assessments and advising on recommended implementation steps.

• Drafting, negotiating and advising on data protection clauses, data processing agreements and controller/processor roles.

• Providing advice on international data transfers.

• Advising on the data protection implications of Brexit, including in relation to lead supervisory authority designations and DPO appointments.

• Advising on data protection compliance in the context of adtech solutions.

• Advising on direct marketing and cookie compliance.

• Assisting clients with responding to data subject complaints and requests, including subject access, erasure, and direct marketing opt-outs.

• Advising on data protection issues in the context of M&A transactions, including due diligence and negotiation of data protection clauses.

• Advising on data security breaches and incident response.