Data Protection & Privacy

Our dedicated team of Data Protection & Privacy experts can help your business navigate the complexities of data protection and privacy laws. We pride ourselves on providing bespoke and practical solutions for data protection compliance.

Clients choose us because our structured and dedicated personnel ensure the data protection compliance process is managed effectively. Benefitting from a multi-jurisdictional focus and collaborative team, our services are tailored and cost-effective.

Our Data Protection & Privacy practice advises on all aspects of data protection law in Cyprus, Bermuda, the British Virgin Islands, and the Cayman Islands.

Europe

The Harneys privacy practice in Cyprus has acquired over the years a wide and versatile experience in privacy and data protection matters and in particular the General Data Protection Regulation (GDPR).

Our services

GDPR trainings

Data breaches notification services

Data protection officer assistance services

Data transfer agreements

Data Protection Officer (DPO) services

Advising on cookies and social media targeting

GDPR compliance programmes

Regulatory updates and review

Providing legal advice on data privacy laws

Americas

The Harneys privacy practice in the Americas offers advice on complying with the fairly recently introduced data protection regimes in Bermuda, the British Virgin Islands, and the Cayman Islands, including:

Bermuda Personal Information Protection Act 2016
The Virgin Islands Data Protection Act, 2021
The Cayman Islands Data Protection Act (2021 Revision)

Our services

Responding to data subject requests

Handling personal data breaches

Intra-Group Transfer Agreements

Providing practical advice to ensure the security of personal data

Advice on data transfers outside of the applicable jurisdiction

Providing legal advice on appropriate lawful basis for processing

Drafting documents eg privacy notices and data protection policies

Recent work

Working on an ongoing basis with a developer, owner and operator of casino gaming and entertainment casino resort facilities in Asia listed on NASDAQ to assist with the GDPR compliance of their Cyprus operations, this being their first foray in Europe.
Working with one of the largest factories in Cyprus to assist with the GDPR compliance of their operations.
Working with one of the largest children’s medical centres in Cyprus for the implementation of their GDPR compliance programme.
Working with a global real estate firm with a CIS focus based in Cyprus on the compliance of all their operations with GDPR, with a particular focus on the structure and compliance of their international marketing activities.
Advising a prominent financial services innovation firm on the data protection aspects of an information request by a third country regulator.
Providing support to litigation proceedings on data protection considerations of third country disclosure orders.
Advising international outfits with headquarters in Cyprus in relation to the relevance of GDPR to their non-EU operations.
Assisting offshore funds, fund administrators and fund managers in relation to the relevance of GDPR to their operations, and working with them to implement necessary GDPR compliance procedures.
Acting as incident response counsel in Cyprus for a number of global financial institutions, in cooperation with UK law firms.
Advising clients on the data protection considerations of their anti-money laundering compliance programmes.
Advising on applicable privacy and data protection considerations in connection with a number of high profile banking acquisitions in Cyprus.
Advising a global, multi-billion dollar medical device company on an Intra-Group Transfer Agreement, involving a BVI entity and BVI data transfers, to ensure compliance with the BVI Data Protection Act, 2021.
Drafting data protection policies and privacy notices for a number of BVI entities, including businesses in the financial services industry, private island resorts, and a cybersecurity firm.
Building robust data protection clauses for contracts of employment and consultancy agreements for a range of organisations, of varying sizes and sectors.
Advising on the handling and reporting of a personal data breach by a Cayman Islands entity.