David Naylor

Technology Transactions/Product Counselling/Data

• One of the world’s leading entertainment, gaming and electronics companies – Advising on all aspects of its commercial contracting for sophisticated cybersecurity and consultancy services, and on associated data privacy and information security requirements.

• Leading technology services business – Providing product counselling and strategic advice in connection with the development of an AI-driven retail transgression system reshaping how UK retailers combat shoplifting.

• Social media technology company – Advising in connection with the launch of a next-gen social media platform championing real user content via AI detection and crypto-enabled engagement.

• One of the UK’s leading cybersecurity companies – Advising on all aspects of its data privacy regulatory compliance and on transactional matters, including in connection with drafting and negotiating significant customer contracts.

• Formula 1 team – Advising on its contracting for the provision of driver fitness performance equipment and software analytics services and the data privacy aspects relating to the use and collection of driver health and fitness information.

• Multinational developer of software-defined storage – Advising across all aspects of its commercial contracting with distributors and resellers, including on major contract negotiations, on cross-border data privacy regulatory compliance, and in connection with complex AI regulatory and data regulatory matters in respect of the development of an AI facial recognition product used by a major US Major League Baseball team.

• English Premier League football club – Advising and leading on its negotiations with a bioanalytics services provider for the provision of services aimed at enhancing performance, minimising injury and accelerating recovery of its elite athletes. Our advice covered all commercial arrangements with the US services provider, and all aspects of data privacy compliance in connection with the collection and use of player health data.

• Cutting-edge blockchain-based fintech company – Advising this client, which specialises in providing innovative on-chain zero-knowledge KYC solutions to facilitate transactions between banks, funds and other financial services business, on the development of its template commercial contracts with on-chain customers, market participants and suppliers.

Artificial Intelligence

• Global leader in threat-detection and security-screening technologies – Advising on the application of the EU AI Act to its AI-enabled technologies.

• Leading aerospace company – Advising on the data protection law implications of using AI to review and screen applications for job vacancies across a number of jurisdictions in EMEA.

• AI company and research laboratory – Advising a UK-based affiliate of one of the largest worldwide tech companies specialising in the development of AI and machine learning-based solutions, in particular in relation to prevailing regulatory risks in the UK and the US in relation to the acquisition and use of data for AI and machine learning purposes.

• NASDAQ-listed global leader in enterprise security and identification – Advising on the development and operationalisation of a governance framework for the assessment and deployment of AI systems globally by the company’s HR function.

• AI computer vision software company – Advising this company pioneering in applied AI, mathematics, physics and biomechanics on its corporate and end-user terms and on data privacy compliance, including in connection with its enterprise and consumer contract terms for the use of its leading-edge AI-powered motion capture video technology and on all data privacy matters relating to its use and processing of personal data within customer video, motion capture and meta data captured or generated by its service.

• Technology-enabled personal assistant service provider – Advising on compliance with complex data privacy and call monitoring and recording regulations in connection with the launch of a suite of new value-added AI-enabled enterprise services, and on its commercial contracting arrangements with major global clients.

Data Privacy/Sovereignty

• Global luxury car manufacturer – Advising on commercial contracting and all data privacy strategy and regulatory compliance, as well as on other regulatory matters relating to the development and international launch of its new connected vehicles across more than 50 countries.

• Leading global supplier of software solutions – Advising on data privacy matters in connection with the high-profile, complex replacement of the UK Post Office’s Horizon IT System impacting 11,500 nationwide branches.

• Global media company – Advising in relation to a data subject access request made by a well-known celebrity and supermodel following widespread allegations in the media questioning their integrity.

• One of the largest privately held global spirits companies – Providing regular counsel with respect to the data privacy aspects of its digital and data-driven advertising, marketing and promotions.

• Leading UK utility provider – Leading an organisation-critical data integrity review and advising on complex data privacy and regulatory matters.

• Global environmental and sustainability consulting company – Advising on a range of AI and related regulatory, data protection, commercial and contractual issues and acquisition/restructuring-related matters across more than 29 jurisdictions.

• Leading private equity fund – Advising on the sovereignty offering and data privacy compliance of a sovereign cloud platform business into which our client was investing.

• Leading private equity company – Advising in connection with the data privacy aspects of the sale of an international clinical trials business.

• Leading investment fund – Advising in connection with complex data sovereignty matters and reducing its core information asset exposure to foreign governmental agencies.

• UK local government pension scheme – Advising in relation to a nationwide digital transformation modernising pension administration for over six million UK members.

• Leading UK platform providing access for individuals to therapy sessions provided by clinical psychologists and behavioural therapists – Advising on commercial and data privacy matters, including in connection with the handling of highly sensitive health data and the sharing of therapy session data between patients, therapists and GPs.

• Software provider – Advising on a broad range of UK, EU and US commercial, data privacy and disputes-related matters, including on the company’s international data collection and usage across its product offerings and operations, as well as on data-focused commercial transactions and privacy compliance, including in connection with key supplier contracts and data processing agreement arrangements, as well as on the use of cookies and other tracking technologies.

• Leading clean energy tech company – Advising in relation to defamatory social media posts by an employee that required us to provide support in the areas of data breach reporting, data breach-related offences, data subject access requests, third-party interaction and data protection terms and international transfers.

• Leading business intelligence company – Advising on data privacy issues in connection with the development and deployment of generative AI tools.

• High-profile international golf league – Advising across the full range of privacy issues arising in connection with its international operations.

• Global company operating in the sports and entertainment industries – Advising on myriad complex, often cross-border data protection compliance issues.

• International sportswear and casual clothing business – Advising this US-headquartered retailer on all data privacy matters relating to the use of third-party systems for employee recruitment and onboarding, the processing by its UK business of employee information and its transfer to the client's US headquarters, and on cross-border data transfers.

Cybersecurity

• One of the largest integrated healthcare providers operating in the Middle East and parts of Asia – Advising on two major significant separate cybersecurity incidents involving ransomware attacks and the exfiltration of highly sensitive health data relating to approximately a quarter of a million individuals in total.

• NYSE-listed global leader in specialty materials – Advising on a complex, international data breach matter, involving a sophisticated ransomware attack that affected the company’s operations in the UK and the EU, the US, Latin America and the Asia Pacific region.

• UK £1 billion-plus pension scheme – Advising on critical regulatory and cyber-risk governance safeguarding matters.

• Global manufacturing business – Advising this global US$3 billion business on incident response and remediation following a significant ransomware attack.

• Global supply chain management provider – Providing business-critical support following a ransomware attack across four continents where the client's operations have been affected. Our work included coordinating all aspects of incident response and investigations, including in connection with work by digital forensics, incident response, data mining and crisis PR teams, as well as with the client’s brokers and insurers; and managing notifications to regulators, data subjects, law enforcement and national security agencies, and interactions with suppliers, partners and other organisations.

• Healthtech company – Advising on a range of business-critical data protection, incident response and reputation management matters, including negotiation of business-critical contracts and in connection with substantial breach of contract claims.