Wayne Cleghorn

Wayne is able to help you and your business with the following:

Data Protection, Privacy, GDPR, Information Management & Cybersecurity

Data protection, privacy and GDPR projects including project scoping, data audits, IT security, governance structures, Data Protection Officer duties, policies, procedures and training. Personal data breach and information security incident planning and live response support for internal reporting, confidential briefings, regulator reporting or high-profile public reporting.

Evaluation of privacy risk to the business and supply chains via Data Protection Impact Assessments (DPIAs), Privacy by Design (PbD) and Data Processor legal compliance reviews. Negotiation of data protection and privacy disputes with advice on Alternative Dispute Resolution (ADR) options and Litigation. Liaising, registering, reporting and responding to Data Protection and Privacy Regulators for clients, as a business as usual activity or as part of a complaint, assessment or investigation.

Assessment of international data protection laws, risks and enforcement around the world, including the UK, the EU & Europe, the Americas, Africa & the Middle East and Asia Pacific. Offer external and outsourced GDPR Data Protection Officer services to clients

Commercial Contracts, Technology Projects & Outsourcing

Negotiating high value IT contracts and technology agreements to improve GDPR compliance.
IT services procurements, including cloud services and ecommerce platforms, call centre data compliance, including writing call centre data protection and security policies and procedures. Outsourcing business processes and human resources to technology vendors and the need to provide for global security standards, lawful data transfers, cybersecurity and data breaches.
Payment Card processing agreements (including anti-fraud protocols), cybersecurity, PCI DSS procedures and compliance, ISO 27002 compliance and disaster recovery protocols. Contract reviews and supply chain contract changes for Privacy Shield and EU/US Safe Harbor.

Technology Regulation, Electronic Marketing and Online Privacy

Advice on GDPR, EU Payment Services (PSD2), EU NIS Directive, Digital identity, e-signatures and user authentication, Open Banking and Brexit compliance synergies in financial services. Advice on the impacts of privacy, cookies, privacy seals and certifications in advertising.

Website EU cookie law analysis, including cookie audits, website domain checks, updated terms and conditions, new privacy and cookies policies and user personalisation options. Customer Relationship Management (CRM), email marketing, viral marketing, social media monitoring, online competitions, online auctions and international market research projects. Direct marketing and online user consent obligations around the world.